1877 matches found
Exploit for CVE-2026-25916
CVE-2026-25916: Roundcube Webmail DOM XSS Exploit 📋 Exploi...
PT-2026-7157
Name of the Vulnerable Software and Affected Versions PlaciPy version 1.0.0 Description PlaciPy is a placement management system for educational institutions. Version 1.0.0 improperly derives the tenant identifier from the user-provided email domain without validating ownership or registration...
PT-2026-7155
PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the code evaluation endpoint does not validate the assessment lifecycle state before allowing execution. There is no check to ensure that the assessment has started, is not expired, or the submission...
PT-2026-7154
PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the GET /api/students/:email PUT /api/students/:email/status, and DELETE /api/students/:email routes in backend/src/routes/student.routes.ts only enforce authentication using authenticateToken but do...
PT-2026-7110
Name of the Vulnerable Software and Affected Versions K12net versions through 09022026 Description A flaw exists in K12net that allows for manipulation of communication channels through the insertion of sensitive information into sent data. The vendor was contacted regarding this issue but did no...
PT-2026-7159
Name of the Vulnerable Software and Affected Versions PlaciPy version 1.0.0 Description PlaciPy is a placement management system for educational institutions. Version 1.0.0 logs sensitive data directly to the console output without any masking or redaction. Recommendations At the moment, there is...
PT-2026-7161
Name of the Vulnerable Software and Affected Versions PlaciPy version 1.0.0 Description PlaciPy is a placement management system for educational institutions. The admin authorization middleware in version 1.0.0 trusts client-controlled JWT claims, specifically the role and scope, without performi...
CVE-2026-25753
PlaciPy (educational placement system) v1.0.0 has a hard-coded, static default password for all newly created student accounts, enabling mass account takeover. The vulnerability, described across multiple sources (NVD, Red Hat, CVE lists, OSV, ENISA, Attackerkb), states that any attacker who know...
CVE-2026-25753
PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application uses a hard-coded, static default password for all newly created student accounts. This results in mass account takeover, allowing any attacker to log in as any student once the...
Microsoft Windows 10 DLL Hijacking Scanner
This PHP class provides a security assessment tool for detecting potential DLL hijacking vulnerabilities on Windows systems. It's designed for educational and defensive security purposes only. that can be exploited on many recent versions of Windows 10, Windows 11, Windows Server 2022...
Exploit for Deserialization of Untrusted Data in Bentoml
CVE-2025-27520 — Безопасная учебная симуляция / PoC Demo Stan...
📄 Chromium Memory Corruption Trigger Simulation
This is a theoretical trigger simulation for a Chromium-class vulnerability associated with memory corruption scenarios commonly affecting the V8 JavaScript engine or the Blink rendering engine. The code intentionally performs heap allocation patterns and unsafe memory access attempts in order to...
HACK NDSU: A Real-World Event to Promote Student Interest in Cybersecurity
Hack NDSU let students scan, probe, and hack North Dakota State University's campus network, under professionals' supervision, providing an aspirational experience, potentially motivating them to enter the field. This paper provides a blueprint for educational hacking events against production...
Exploit for CVE-2020-1472
Active Directory Attack Path Suggestion Engine !Python Versi...
Exploit for CVE-2025-36911
zWhisper CVE-2025-36911 WhisperPair Vulnerability Scanner...
buffer-overflow
Buffer Overflow Overview This repository contains educatio...
Exploit for Code Injection in Laravel Livewire
CVE-2025-54068 A tool designed to exploit CVE-2025-54068 and...
ethical-hacking-excersises
Exploitation Techniques – Course Exercises Repository Over...