115474 matches found
EUVD-2026-104389
Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-86375
Dell Application Installer , versions prior to 26.09.0.1 , contains a Missing Encryption of Sensitive Data vulnerability (CWE-311). An unauthenticated attacker with local access could potentially exploit this flaw to gain Unauthorized access to sensitive information. Remediation is available via ...
CVE-2026-86375
Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2024-0195-SpiderFlow
CVE-2024-0195 Improper Control of Generation of Code 'Code Injection' Critical 2024 Summary CVE-2024-0195 is a critical code injection vulnerability in the spider-flow 0.4.3 web application, specifically in the FunctionService.saveFunction function of the FunctionController.java file. An attacker...
⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More
The worst problems don't always come with a warning. Sometimes they arrive through a service everyone trusts, a device someone bought, or a system nobody thought to check. By the time something looks wrong, the damage may already be done. This week had plenty of that. Trusted connections became a...
CVE-2025-55182-bypass
CVE-2025-55182-bypass CVE-2025-55182-bypass-waf...
CVE-2022-23861
CVE-2022-23861: Multiple Stored Cross-Site Scripting in YSoft SafeQ Multiple fields in the YSoft SafeQ web application can be used to inject malicious inputs that, due to a lack of output sanitization, result in the execution of arbitrary JS code. These fields can be leveraged to perform XSS...
CVE-2023-38646
CVE-2023-38646 Code to detect/exploit vulnerable metabase application...
Adiscon
Exploit Title: Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection. Date: 2023-06-20 Exploit Author: Pedro TW Category : Webapps Vendor Homepage: https://loganalyzer.adiscon.com/ Version: v4.1.13 and before Tested on: Linux CVE : CVE-2023-34600 Reference...
signal-without-smartphone
Setup Signal without smartphone A Desktop application to register an account with Signal and link it with Signal Desktop, all without requiring a smartphone. This utility avoids the need of a smart phone, but still requires a way to receive SMS messages during the setup phase. Signal recently...
cve-2017-5638
CVE-2017-5638 Demo app of, yes, that data broker's security breach. Includes exploit code. Basic usage launch mvn jetty:run Then go to http://localhost:8080/basic-struts/index.action. You should see the Welcome to Struts 2! message. Vulnerability scan mvn site Acknowledgements Exploit code adapte...
metahub
MetaHub is an automated contextual security findings enrichment and impact evaluation tool for vulnerability management. You can use it with AWS Security Hub or any ASFF-compatible security scanner. Stop relying on useless severities and switch to impact scoring definitions based on YOUR context...
EUVD-2026-104151
Insertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Full API keys are written to application logs on every authenticated request, allowing anyone with log-read access to recover and replay active bearer credentials. Use...
pyrasp
What is PyRASP ? PyRASP is a Runtime Application Self Protection package for Python-based Web Servers Flask, FastAPI and Django and Serverless Functions AWS Lambda, Azure and Google Cloud Functions. It protects against the main attacks web applications are exposed to, from within the application...
CVE-2023-33668
CVE-2023-33668 Summary DigiExam is a surveillance exam and proctoring software. The software is installed in schools' or students' computers. When the student joins an exam, DigiExam will: ensure it's not running in a Virtual Machine, terminate all applications, fullscreen itself, and prevent the...
android_application_analyzer
Android Application Analyzer The tool is used to analyze the content of the android application in local storage. Install the dependency using following command chmod +x setup.sh ./setup.sh Use the following command to run the tool using python3 python -m venv androidapplicationanalyzer...
CVE-2023-36085_SISQUALWFM-Host-Header-Injection
CVE-2023-36085 SISQUALWFM Host Header Injection Vulnerability This repository contains information related to a host header injection vulnerability discovered in SISQUALWFM version 7.1.319.103, which allows an attacker to manipulate webpage links or redirect users to a malicious site. This...
CVE-2023-27372-POC
CVE-2023-27372-POC Overview This code is a Python POC Proof of Concept for detecting whether a target website has the CVE-2023-27372 vulnerability. You can run this code by providing a single URL or a text file containing multiple URLs. Affected version: SPIP "; Features Check whether the target...