19286 matches found
Exploit for Unrestricted Upload of File with Dangerous Type in Najeebmedia Frontend_File_Manager
CVE-2016-15042 – WordPress Frontend File Manager & N‑Media Pos...
VulnRepairEval: an Exploit-Based Evaluation Framework for Assessing Large Language Model Vulnerability Repair Capabilities
The adoption of Large Language Models LLMs for automated software vulnerability patching has shown promising outcomes on carefully curated evaluation sets. Nevertheless, existing datasets predominantly rely on superficial validation methods rather than exploit-based verification, leading to...
BIDO: a Unified Approach to Address Obfuscation and Concept Drift Challenges in Image-Based Malware Detection
To identify malicious Android applications, various malware detection techniques have been proposed. Among them, image-based approaches are considered potential alternatives due to their efficiency and scalability. Recent studies have reported that these approaches suffer significant performance...
Soft Serve vulnerable to arbitrary file writing through SSH API
Attackers can create/override arbitrary files with uncontrolled data. For a PoC, spin up an instance of soft-serve as explained in the README, and execute the following command: sh ssh -p23231 localhost repo commit icecream -- --output=/tmp/pwned It should have created a file in /tmp/pwned...
CVE-2025-58358
creationtimestamp| type| source ---|---|--- 2025-09-02 15:53:24+00:00| published-proof-of-concept| https://github.com/zcaceres/markdownify-mcp/security/advisories/GHSA-45qj-4xq3-3c45...
CVE-2021-45678
creationtimestamp| type| source ---|---|--- 2025-09-02 03:00:11+00:00| published-proof-of-concept| Telegram/GEkR6uvvQv1G7IjolMMSN6rpe7aLljKNJqfW3Ae8ZdVwvto...
CVE-2019-10945
creationtimestamp| type| source ---|---|--- 2025-09-02 03:00:07+00:00| published-proof-of-concept| Telegram/MD9q5t51bB2OoDqSTsSxVm7tf7vA1bzUvnWo2SnnCre9ZQo...
CVE-2024-25765
creationtimestamp| type| source ---|---|--- 2025-09-01 21:00:04+00:00| published-proof-of-concept| Telegram/nfGTp2xTn4QGBhVuPNna78NmZEMmW41bwCC35jvxvcYjBw...
Exploit for CVE-2021-45678
It is an offensive tool for Hikvision IP Camera. The tool is a P...
CVE-2025-52413
creationtimestamp| type| source ---|---|--- 2025-08-31 18:20:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/49769 2025-08-31 19:00:07+00:00| published-proof-of-concept| Telegram/aQ2LdSjNitV84X8xJ4U0UdyaOVAyRIhQtY-6g79ORFZBAk 2025-08-31 21:00:04+00:00| published-proof-of-concept|...
CVE-2025-55349
creationtimestamp| type| source ---|---|--- 2025-08-31 14:36:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/49747 2025-08-31 19:00:07+00:00| published-proof-of-concept| Telegram/aQ2LdSjNitV84X8xJ4U0UdyaOVAyRIhQtY-6g79ORFZBAk 2025-08-31 21:00:04+00:00| published-proof-of-concept|...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
It is an offensive tool for Apache exploitation. The repository...
CVE-2025-58162
creationtimestamp| type| source ---|---|--- 2025-08-31 02:35:35+00:00| published-proof-of-concept| https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-9gh8-9r95-3fc3...
CVE-2025-52100
creationtimestamp| type| source ---|---|--- 2025-08-29 09:00:04+00:00| published-proof-of-concept| Telegram/bKP-iwwMQtOOWDZQExb8JL74Stavj2rFrcGJwGzD4-08zAc...
CVE-2024-48908
creationtimestamp| type| source ---|---|--- 2025-08-28 13:24:35+00:00| published-proof-of-concept| https://github.com/lycheeverse/lychee-action/security/advisories/GHSA-65rg-554r-9j5x...
Someone Created the First AI-Powered Ransomware Using OpenAI's gpt-oss:20b Model
Cybersecurity company ESET has disclosed that it discovered an artificial intelligence AI-powered ransomware variant codenamed PromptLock. Written in Golang, the newly identified strain uses the gpt-oss:20b model from OpenAI locally via the Ollama API to generate malicious Lua scripts in real-tim...
CVE-2025-9532
A flaw has been found in Portabilis i-Educar up to 2.10. This impacts an unknown function of the file /RegraAvaliacao/view. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor...