840309 matches found
CVE-2026-112304 docTR through 1.1.0 Unsafe Deserialization RCE via load_pretrained_params()
docTR through 1.1.0 contains an unsafe deserialization vulnerability in loadpretrainedparams that loads checkpoints with torch.load without weightsonly=True. Attackers who control a local or URL-supplied checkpoint can embed a malicious pickle payload to execute Python code with the loading...
CVE-2026-112303 GDevelop through 5.6.284 Cookie Leak via LocalFileDownloader Resource URLs
GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gdresource cookie by supplying attacker-controlled resource URLs in project files. Attackers can get victims to open a crafted project, causing downloadLocalFile to send the cookie to...
EUVD-2026-104396
docTR through 1.1.0 contains an unsafe deserialization vulnerability in loadpretrainedparams that loads checkpoints with torch.load without weightsonly=True. Attackers who control a local or URL-supplied checkpoint can embed a malicious pickle payload to execute Python code with the loading...
CVE-2026-112304 docTR through 1.1.0 Unsafe Deserialization RCE via load_pretrained_params()
docTR through 1.1.0 contains an unsafe deserialization vulnerability in loadpretrainedparams that loads checkpoints with torch.load without weightsonly=True. Attackers who control a local or URL-supplied checkpoint can embed a malicious pickle payload to execute Python code with the loading...
CVE-2026-112303 GDevelop through 5.6.284 Cookie Leak via LocalFileDownloader Resource URLs
GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gdresource cookie by supplying attacker-controlled resource URLs in project files. Attackers can get victims to open a crafted project, causing downloadLocalFile to send the cookie to...
CGA-4MXG-C4F4-6XVG
Bulletin has no description...
CGA-RJMJ-M83C-JHW5
Bulletin has no description...
CGA-7GCV-6GJ5-883R
Bulletin has no description...
CGA-R3QX-7WMW-MV8J
Bulletin has no description...
graphicator
Graphicator Graphicator is a GraphQL "scraper" / extractor. The tool iterates over the introspection document returned by the targeted GraphQL endpoint, and then re-structures the schema in an internal form so it can re-create the supported queries. When such queries are created is using them to...
CVE-2026-2631
CVE-2026-2631 Datalogics Ecommerce Delivery ā Datalogics PoC / Exploit Script: CVE-2026-2631.py Author: Khaled Alenazi Nxploited ā Nxploited ZeroDay Hub Contact: Telegram: @Kxploit š§¬ Vulnerability Overview Plugin: Datalogics Ecommerce Delivery ā Datalogics WordPress Affected Versions: 2.6.60...
Umbra
Umbra Umbra is an experimental remotely controllable LKM rootkit for kernels 4.x and 5.x up to 5.7 which opens a network backdoor that can spawn reverse shells to remote hosts, launch malware remotely and much more. The rootkit is still under development, although the features listed below are...
Jbin-website-secret-scraper
šļø Jbin will gather all the URLs from the website and then it will try to expose the secret data from them. It collects both URLs and JS links to scrape secrets out of it. Also if you are looking for a specific string in a page or want to run custom regex then you can do that too now with the new...
CVE-2026-112147
A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown function of the file server/src/index.ts. Performing a manipulation of the argument path results in information disclosure. The attack may be initiated remotely. The exploit has been made...
Dop2Mop
Dop2Mop A proof-of-concept OpenGraph collector for BloodHound that maps attack paths from DevOps to MLOps infrastructure. Based on Pipelines of Privilege: Attack Paths from DevOps to MLOps Infrastructure by Brett Hawkins @h4wkst3r. Table of Contents Acknowledgments Overview Supported Platforms...
CGA-QFC7-7X59-J7PQ
Bulletin has no description...
CGA-PQP3-5PM2-V2PR
Bulletin has no description...
proxylogscan
proxylogscan This tool to mass scan for a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin CVE-2021-26855. By chaining this bug with another post-auth arbitrary-file-write vulnerability to get code execution...
c2-cloud
About The Project The C2 Cloud is a robust web-based C2 framework, designed to simplify the life of penetration testers. It allows easy access to compromised backdoors, just like accessing an EC2 instance in the AWS cloud. It can manage several simultaneous backdoor sessions with a user-friendly...