publications

Publications A home for publications, including slides/papers, proof-of-concepts, videos and tools. For blog posts, see the elttam blog, and for our services, see our website. Date| Type| Event| Title| Resources ---|---|---|---|--- 2026| adv| -| Home Assistant Authenticated Arbitrary File Read vi...

rustsec

RustSec Crates 🦀🛡️📦 The RustSec Advisory Database is a repository of security advisories filed against Rust crates published via crates.io. The advisory database itself can be found at: https://github.com/RustSec/advisory-db About this repository This repository contains a Cargo Workspace with all...

security-advisories

Threat Lance Security Advisories Public security advisory repository by Threat Lance. CVE| Title| Severity| Published ---|---|---|--- CVE-2025-50455| EasyAppointments = 1.5.1 Blind SQL Injection via orderby| Critical| TBD...

advisories

Enable Security Advisories This repository contains reproduction code, proof-of-concept scripts, and supporting files for security advisories published by Enable Security. Full advisories: https://www.enablesecurity.com/advisories/ The complete advisory content descriptions, impact, timeline, etc...

security-research

Security Research This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Google which impact non-Google owned code. We believe that vulnerability disclosure is a two-way street. Vendors, as well as researchers, must act responsibly. This i...

vuln-list-redhat

vuln-list-redhat Red Hat security advisories...

advisories

SBA Research Security Advisories Security advisories published by SBA Research...

vuln-list-aqua

vuln-list-aqua Security advisories from Aqua Security...

advisories

This repository does not have a README...

esm.sh <= v136 - Local File Inclusion

esm.sh = 136 contains a local file inclusion caused by improper URL handling, letting attackers read arbitrary files from the host filesystem remotely, exploit requires crafted request. id: CVE-2025-59341 info: name: esm.sh = v136 - Local File Inclusion author: 0xAkoko severity: high description:...

SuperWebMailer 9.00.0.01710 - Cross-Site Scripting

An issue was discovered in SuperWebMailer 9.00.0.01710 allowing XSS via crafted incorrect passwords. id: CVE-2023-38192 info: name: SuperWebMailer 9.00.0.01710 - Cross-Site Scripting author: ritikchaddha severity: medium description: | An issue was discovered in SuperWebMailer 9.00.0.01710 allowi...

security-advisories

Security Advisories Public security advisories by Greg Durys. Advisory| Product| Vulnerabilities| Severity ---|---|---|--- Cohesity TranZman| TranZman Migration Appliance| 5 CVEs CWE-78, CWE-434, CWE-269, CWE-327| High pwnlift| rasta-mouse/pwnlift| CVE-2026-56815 CWE-59, CWE-367| High skillable|...

advisories

Advisories Security advisories from Kelly Kaoudis @kaoudis and friends. In general, I'll publish here either after the vendor has patched, or after 90 days from vulnerability discovery. Happy reading! Advisories are numbered in discovery order & by year; discovery enumeration starts at 0...

Aninda-security-advisories

This repository does not have a README...

0day-Rubbish

0day Rubbish 0day vulnerabilities have become rubbish in the AI era. 🌐 Official Website : https://0day-rubbish.com/blog 🎯 Why This Exists Traditional vulnerability disclosure is broken. It's slow, bureaucratic, and ineffective. In the AI era, we can mass-produce 0days at scale—making individual...

vuln-list-backup

vuln-list Collect vulnerability information and save it in parsable format automatically Source Directory| OS| Source| URL ---|---|---|--- alma/| AlmaLinux| AlmaLinux Errata| https://errata.almalinux.org/8/errata.json alpine/| Alpine Linux| Alpine secdb| https://secdb.alpinelinux.org/ amazon/1|...

security-advisories

security-advisories Public security advisories published by Me Chidubem ChukwuTerminal Venom, including CVE disclosures and vulnerability reports for open-source and third-party softwares...

cve-advisories

byteme team...

advisory

Security Advisories — bl4dsc4n Public repository containing security advisories, technical analyses, and Proof-of-Concepts PoCs for vulnerabilities independently discovered in open-source software. All vulnerabilities were identified through manual source code review, secure code analysis, and...

PoC

Pedro Ribeiro @pedrib Exploit Dumping Grounds This repository contains information, exploits, scripts, etc, that I have made public and it is located at https://github.com/pedrib/PoC. advisories: all my public advisories, research notes, etc Pwn2Own: advisories related to my Pwn2Own participation...