9205 matches found
PT-2025-35522
Name of the Vulnerable Software and Affected Versions MobSF version 4.4.0 Description MobSF is a mobile application security testing tool. An authenticated user who uploaded a specially prepared one.a file could write arbitrary files to any directory writable by the user of the MobSF process. Thi...
Router-Exploiter
Router-Exploiter A powerful and stealthy penetration testing t...
DomiExploit-Cyber-Scanner
It is an offensive tool for penetration testing. The DomiExploit...
The vulnerability of the software component responsible for managing and publishing geodata on the OSGeo GeoServer server allows a perpetrator to upload arbitrary files.
The vulnerability of the software components used for managing and publishing geodata on the OSGeo GeoServer server is related to insufficient testing of requests on the server side. Exploiting this vulnerability could allow a malicious actor to upload arbitrary files remotely...
The vulnerability of the TestWfsPost component in the software for administrative and publishing operations on the OSGeo GeoServer server allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the TestWfsPost component in the software for administrative and publishing operations on the OSGeo GeoServer server is related to insufficient testing of requests on the server side. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...
Exploit for Improper Input Validation in Rubyonrails Rails
🔐 Black Box Penetration Test on DVWA This repository document...
trashhost
xss tool and sqli detector...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Denial of Service in huggingface/transformers [CVE-2025-2099]
Summary IBM Watson Speech Services Cartridge is vulnerable to a Denial of Service in huggingface/transformers, due to an issue where the regular expression used to process code blocks in docstrings contains nested quantifiers, leading to exponential backtracking when processing input with a large...
Malicious code in testpointx0-testing-test (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41611 Malicious code in testpointx0-testing-test (npm)
--- -= Per source details. Do not edit below this line.=-...
PT-2025-34983
Name of the Vulnerable Software and Affected Versions: QuickCMS version 6.8 Description: QuickCMS is susceptible to a Cross-Site Request Forgery CSRF issue in the page deletion functionality. A malicious actor can create a crafted website that, when visited by an administrator, automatically send...
Multi-Agent Penetration Testing AI for the Web
AI-powered development platforms are making software creation accessible to a broader audience, but this democratization has triggered a scalability crisis in security auditing. With studies showing that up to 40% of AI-generated code contains vulnerabilities, the pace of development now vastly...
Linux Distros Unpatched Vulnerability : CVE-2022-3767
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing validation in DAST analyzer affecting all versions from 1.11.0 prior to 3.0.32, allows custom request headers to be sent with every request, regardless ...
CVE-2025-36729 RACOM M!DGE2 Privilege Escalation via SDK Testing Endpoint
A non-primary administrator user with admin rights to the web interface but without shell access permissions can display configuration of the device including the master admin password. This vulnerability also allows the user to give themselves shell access with the root gid...
PT-2025-44136
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel's NTFS3 subsystem related to integer overflow in the run unpack function. The run unpack function decodes compressed runlist data from MFT attributes,...
Exploit for CVE-2025-8671
CVE-2025-8671 - PoC DoS lighttpd HTTP/2 Auteur : @abiyeenzo...
Malicious code in seclab-research-depconf-test-2 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c4210a0224d23d330894d4d8e0f694f3c81a4fb7b71d5056636aecf98fd9b6f6 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...
The vulnerability of the Microsoft Visual Studio software allows a hacker to execute arbitrary code.
The vulnerability of the Microsoft Visual Studio software development tool is related to insufficient testing of arguments passed in commands. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
[SECURITY] Fedora 42 Update: python3.6-3.6.15-49.fc42
Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...