ccs

Code Credential Scanner This script is intended to scan a large, diverse codebase for hard-coded credentials, or credentials present in configuration files. These represent a serious security issue, and can be extremely hard to detect and manage. The specific focus of this script is to create a...

CVE-2026-123783

Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType. Attackers can deploy scripts that evade the issafescriptcode AST denylist and import blocked modules such as subprocess...

CVE-2026-123675 OpenBMB Internet of Agents Code Executor Tool code_executor.py execute_code code injection

A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function executecode of the file imclient/agents/tools/codeexecutor.py of the component Code Executor Tool. This manipulation of the argument filename/lang causes code injection. T...

EUVD-2026-118307

A flaw has been found in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a. This affects the function executecode of the file imclient/agents/tools/codeexecutor.py of the component Code Executor Tool. This manipulation of the argument filename/lang causes code injection. T...

CVE-2026-123675

A code injection vulnerability exists in the Code Executor Tool of OpenBMB Internet of Agents (up to commit 9d78e88e47160eb42ee1ee8538c05e1c2c47877a). The flaw is located in the execute_code function within im_client/agents/tools/code_executor.py, where improper handling of the filename/lang argu...

CVE-2026-121881 Posit Workbench code-server session-state RPC (get_last_seen) SQL injection

SQL injection vulnerability in the getlastseen code-server session-state RPC in Posit Software, PBC Posit Workbench before 2026.08.0 allows authenticated users to read arbitrary data from the Workbench database via the sessionIds parameter. NOTE: exploitation requires a valid authenticated sessio...

CVE-2026-121881

An SQL injection vulnerability exists in the get_last_seen code-server session-state RPC of Posit Workbench (versions before 2026.08.0 ) by Posit Software, PBC. The flaw is caused by improper handling of the sessionIds parameter, which allows authenticated users to read arbitrary data from the Wo...

EUVD-2026-118301

Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType. Attackers can deploy scripts that evade the issafescriptcode AST denylist and import blocked modules such as subprocess...

CVE-2026-123783

Skyvern versions through 1.0.56 are vulnerable to a sandbox bypass that allows authenticated users to execute arbitrary code. The root cause is the ability to reconstruct functions from raw bytecode using types.CodeType. By exploiting this, attackers can bypass the is_safe_script_code AST denylis...

CVE-2026-123783 Skyvern through 1.0.56 Script Sandbox Bypass via types.CodeType Bytecode

Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType. Attackers can deploy scripts that evade the issafescriptcode AST denylist and import blocked modules such as subprocess...

CVE-2026-120438

QuickJS-NG before 0.16.0 contains an integer overflow in jsproxygetownpropertynames in quickjs.c that causes a heap buffer overflow on 32-bit hosts. Attackers running JavaScript can return a large array-like object from a Proxy ownKeys trap to wrap the allocation size, causing crashes or potentia...

CVE-2024-4577-nuclei

CVE-2024-4577-nuclei Payload: ?%ADd+allowurlinclude%3d1+%ADd+autoprependfile%3dphp://input Test URL: /unfxu9a.phppayload /php-cgi/unfxu9a.phppayload /cgi-bin/php-cgi.exepayload /php-cgi/php-cgi.exepayload /php-cgi/php.exepayload /cgi-bin/php.exepayload Ref:...

CVE-2026-121994

A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to execute arbitrary code in the GDB process. The vulnerability exists in fetchregisterusingp, which decodes a stub's register reply into an alloca-sized buffer without bounding writes b...

CVE-2026-121997

A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve native code execution in the gdbserver process. The vulnerability results from a mismatch between a packet's declared source length and the actual data length, causing hex2bin to writ...

ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution

ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution Exploit for CVE-2007-4560 ClamAV Milter Sendmail 0.91.2 Remote Code Execution The exploit is for educational purposes only and should not be used for malicious purposes...

CVE-2020-5902

CVE-2020-5902 Python script to check CVE-2020-5902 F5 BIG-IP devices. Usage python3 CVE-2020-5902.py -i Output - Python script to check CVE-2020-5902 F5 BIG-IP devices. | coded by Abdullah AlZahrani ! Your target: 127.0.0.1 I /etc/passwd readable PoC...

DDWPasteRecon

DDWPasteRecon Pastesites are websites that allows users to share plain text through public posts called “pastes.” Once attackers compromise the external perimeter and gain access to the internal resources they release the part of data on the "paste" sites like pastebin or hastebin. As these hacke...

CloudMiner

CloudMiner Execute code within Azure Automation service without getting charged Description CloudMiner is a tool designed to get free computing power within Azure Automation service. The tool utilizes the upload module/package flow to execute code which is totally free to use. This tool is intend...

wahh_extras

wahhextras The Web Application Hacker's Handbook - Extra Content For all of you who have read "The web application hacker's handbook vol2", there are several references to extras, questions, source code that are not easy to found. I've collected all in this repository. TOC Web applications...

threatspec

threatspec - continuous threat modeling, through code Threatspec is an open source project that aims to close the gap between development and security by bringing the threat modelling process further into the development process. This is achieved by having developers and security engineers write...