207 matches found
Exploit for Improper Authorization in Vercel Next.Js
MiddleForce 🔍 Overview MiddleForce is a speci...
EUVD-2025-7729
Malicious code in bioql PyPI...
nettoolbox
NetToolbox - Network Security Toolkit A comprehensive, modern...
Time-Constrained Intelligent Adversaries for Automation Vulnerability Testing: a Multi-Robot Patrol Case Study
Simulating hostile attacks of physical autonomous systems can be a useful tool to examine their robustness to attack and inform vulnerability-aware design. In this work, we examine this through the lens of multi-robot patrol, by presenting a machine learning-based adversary model that observes...
Exploit for Out-of-bounds Read in Openssl
It is an exploit module/toolkit targeting OpenSSL versions vulnerable to CVE-2014-0160, also known as the Heartbleed vulnerability. The tool, ssltest.py, scans multiple hosts for this vulnerability in an efficient multi-threaded manner without exploiting the server. The probable entry point is th...
IoTFuzzSentry: a Protocol Guided Mutation Based Fuzzer for Automatic Vulnerability Testing in Commercial IoT Devices
Protocol fuzzing is a scalable and cost-effective technique for identifying security vulnerabilities in deployed Internet of Things devices. During their operational phase, IoT devices often run lightweight servers to handle user interactions, such as video streaming or image capture in smart...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
SMBGhost Simple scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request. A network...
Security Analysis of ChatGPT: Threats and Privacy Risks
As artificial intelligence technology continues to advance, chatbots are becoming increasingly powerful. Among them, ChatGPT, launched by OpenAI, has garnered widespread attention globally due to its powerful natural language processing capabilities based on the GPT model, which enables it to...
CVE-2025-51044
CVE-2025-51044 concerns the phpgurukul Nipah virus (NiV) Testing Management System 1.0. The vulnerability is a SQL injection in the web path “/new-user-testing.php” triggered by insufficient validation of the input parameter “govtissuedid.” The issue is evidenced by multiple connected sources, wh...
isf
This is a Python-based exploitation framework called ISF Industrial Exploitation Framework that is similar to Metasploit. It is designed for industrial control system ICS exploitation and is used for testing and demonstrating vulnerabilities in ICS devices. The framework is based on the open-sour...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433Erlang-OTP This script is a custom security too...
Exploit for Deserialization of Untrusted Data in Apache Parquet_Java
Canary Exploit for Parquet CVE-2025-30065...
Nearly 24,000 IPs Target PAN-OS GlobalProtect in Coordinated Login Scan Campaign
Cybersecurity researchers are warning of a spike in suspicious login scanning activity targeting Palo Alto Networks PAN-OS GlobalProtect gateways, with nearly 24,000 unique IP addresses attempting to access these portals. "This pattern suggests a coordinated effort to probe network defenses and...
Exploit for Code Injection in Apache Commons_Text
text4shell-exploit A custom Python-based proof-of-concept PoC...
CVE-2025-29640
Phpgurukul Human Metapneumovirus HMPV – Testing Management System v1.0 is vulnerable to SQL Injection in /patient-report.php via the parameter searchdata...
Exploit for OS Command Injection in Php
PHP-CGI Injector 🚀 CVE-2024-4577 & CVE-2024-8926 Exploit To...
Loaded Commerce 6.6 Client-Side Template Injection
Loaded Commerce version 6.6 suffers from a client-side template injection vulnerability. Exploit Title: Loaded Commerce 6.6 Client-Side Template InjectionCSTI AngularJS Date: 03/13/2025 Exploit Author: tmrswrr Vendor Homepage: https://loadedcommerce.com/ Version: 6.6 Tested on:...
Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os
This tool tests whether a target PAN-OS device is vulnerable to...
The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in insufficient validation of input data, allowing attackers to execute arbitrary code.
The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to insufficient testing of input data. Exploiting this vulnerability can allow attackers to execute arbitrary code...