197961 matches found
cs50-cyber-paloalto-oauth
CS50 Cybersecurity Final Project Title: The Salesloft OAuth Breach & CVE-2024-3400 Palo Alto impact Author: Yafiya Darwesh GitHub: Yafiah-Darwesh YouTube video: https://youtu.be/CxQNj9qWoZ0?si=cHCwuTIY26YHJ8aw CVE: CVE-2024-3400 Files presentation.pdf โ slides script.txt โ speaker notes Summary...
CVE-2022-24086
CVE-2022-24086 CVE-2022-24086 about Magento RCE Description Adobe Commerce versions 2.4.3-p1 and earlier and 2.3.7-p2 and earlier are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result i...
Venom-JWT
Venom-JWT Penetration Tool - JWT Vulnerability and Secret Cracking Service Penetration Testing Solemn Statement: The techniques, ideas, and tools mentioned in this document are for learning and communication purposes only for security. No one shall use them for illegal purposes or for profit,...
SynthAPT
SynthAPT Overview SynthAPT is a playbook-based adversary simulation framework for replicating complex attack paths. It is designed for validating advanced detections and AI-based investigation agents. The core idea is that malware behavior can be expressed in JSON and compiled into functional...
redthread
RedThread Find the exploit. Judge it. Draft the fix. Prove what changed. RedThread is a CLI-first framework for testing LLM systems, validating failures, and turning confirmed vulnerabilities into evidence-backed defense candidates. It is built for teams who need more than a one-off jailbreak dem...
CVE-2025-10720-PoC
Description This proof of concept PoC describes an authentication bypass vulnerability found in the WordPress plugin WP Private Content Plus v3.6.2. The issue allows unauthenticated users to bypass password-protected content due to improper reliance on client-side cookies. Details Vulnerability...
PurpleKeep
Description With the rapidly increasing variety of attack techniques and a simultaneous rise in the number of detection rules offered by EDRs Endpoint Detection and Response and custom-created ones, the need for constant functional testing of detection rules has become evident. However, manually...
security-audit-skill
security-audit A coding-agent skill that turns your agent into a security auditor. It orchestrates multiple parallel agents through a six-phase pipeline -- recon, hunting, validation, reporting, structured output, and independent verification -- to find exploitable vulnerabilities with real impac...
CVE-2024-50427
CVE-2024-50427 SurveyJS: Drag & Drop WordPress Form Builder = 1.9.136 - Authenticated Subscriber+ Arbitrary File Upload Description: The SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity plugin for WordPress is vulnerable to arbitrary file...
CVE-2019-3396
CVE-2019-3396 ๐ Key Information: Affected Product : Confluence Server & Data Center Affected Versions : from 6.0.0 to 6.15.4 Severity : Critical CVSS 9.8 Cause : Confluence has a Widget Connector plugin used to embed videos, external content like YouTube, Vimeo.... This function does not properly...
sqlsure
sqlsure AI writes your SQL. sqlsure makes sure it's right. A query can be perfectly valid, run without error, and return a number that's silently wrong โ revenue double-counted by a join, an average summed, a patient identifier exposed. Databases don't catch this. Linters don't catch this. LLMs...
CVE-2025-25279
Security Advisory MMSA-2025-00430 / CVE-2025-25279 Summary After uploading a file to Mattermost Boards, when the fileId parameter is modified and the board is copied, the file now points to and downloads the target file specified in the parameter. Affected Versions: Mattermost instances with Boar...
CVE-2021-41730
TENDA Authorization Remote Command Execution Exploit Author: SHENGXI [email protected] Vender: TENDA CVE-2021-41730 - /bin/httpd Firmware version: AC15: =USAC15V1.0BRV15.03.05.20multiTDE01.bin AC6: USAC6V1.0BRV15.03.05.16multiTD01.bin ....... Hardware Link:...
CVE-2018-0114
CVE-2018-0114 Exploitation of a vulnerability in Cisco's node-jose, a JavaScript library created to manage JWT. This vulnerability in Cisco's node-jose allows an attacker to forge malicious tokens. JWT allows users to embed public keys using the jwk value inside the header of the token. However,...
cloudtoolkit
CloudToolKit English | ็ฎไฝไธญๆ Multi-cloud defensive validation toolkit for CSPM / CNAPP detection, telemetry, and investigation workflows in authorized environments. CloudToolKit gives security teams a practical way to verify whether cloud controls are discoverable, detectable, alertable, and...
CVE-2026-105127
LaraDashboard 1.4.2 before 1.4.8 applies advanced email validation to unauthenticated forgot-password and reset-password requests, triggering DNS lookups and paid AbstractAPI verification calls. Unauthenticated attackers can submit arbitrary addresses to exhaust the verification quota, making...
The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.
The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...
The vulnerability of the Test IT testing system, related to insufficient validation of requests on the server side, allows a hacker to perform an SSRF attack.
The vulnerability of the Test IT testing management system is related to insufficient testing of server-side requests. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
The vulnerability of the ClamAV antivirus software lies in its insufficient validation of input data, allowing attackers to circumvent existing security restrictions.
The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...
The vulnerability of the ClamAV antivirus software lies in its insufficient validation of input data, allowing attackers to circumvent existing security restrictions.
The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...