278510 matches found
Exploit for Use After Free in Google Chrome
CVE-2026-13036 — Use-After-Free in Blink WidgetBase::UpdateS...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Nvidia Triton_Inference_Server
CVE-2026-24207 / 24206 — NVIDIA Triton Inference Server SageMa...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Nvidia Triton_Inference_Server
CVE-2026-24207 / 24206 — NVIDIA Triton Inference Server SageMa...
Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise_Peopletools
CVE-2026-3527...
Binary-Exploitation-and-Reverse-Engineering
Binary Exploitation & Reverse Engineering Lab Hands-on memory...
Exploit for CVE-2026-43503
CVE-2026-43503 — DirtyClone Linux local privilege escalation...
📄 Penpot Server-Side Request Forgery
Penpot's remote image import let an authenticated file editor turn a normal media convenience feature into backend-origin server-side request forgery because attacker-controlled URLs crossed into a redirect-following server fetch path without destination filtering. CVE-2026-45806 Penpot's remote...
📄 Peyara Remote Mouse 1.0.1 Unauthenticated Remote Code Execution
This Metasploit module exploits an unauthenticated remote code execution vulnerability in Peyara Remote Mouse 1.0.1. The application exposes a Socket.IO WebSocket service on TCP port 1313 and accepts unauthenticated keyboard input events. The module sends keyboard events to open the Windows comma...
📄 Docmost 0.70.2 Authorization Bypass
In Docmost versions 0.70.0 through 0.70.2, restricted child pages hidden from public share viewers could still leak through public share search results. CVE-2026-33146 A public share looked clean in the page tree, but the search endpoint told a different story. In Docmost, restricted child pages...
📄 Yeoman Environment 6.0.0 Code Execution
Yeoman Environment versions 2.9.0 through 6.0.0 have an issue where missing generators can be installed without user confirmation, turning attacker-controlled project metadata into a package-install and code-execution path. CVE-2026-42089 A local package installation helper trusted caller-supplie...
📄 Docmost Cross Site Scripting
Docmost versions prior to 0.71.0 suffer from a persistent cross site scripting vulnerability. CVE-2026-34212 Docmost accepted a javascript: URL inside an attachment node, preserved it through storage and rendering, and turned it back into a clickable anchor in the Docmost origin. Intro I...
📄 phpSysInfo 3.4.5 IP Allowlist Bypass
phpSysInfo versions 3.4.5 and below suffer from an IP Allowlist bypass vulnerability. CVE-2026-55584 - phpSysInfo IP Allowlist Bypass CWE-290, CVSS 7.5 High, phpSysInfo = 3.4.5 Refs: GHSA-786w-p5pm-cvgh, CVE.org PSIALLOWED resolves the client IP from the attacker-controlled X-Forwarded-For then...
📄 Plane Improper Authorization
Plane's asset subsystem trusted workspace slugs and asset UUIDs without enforcing the right membership checks, which let one authenticated user read, copy, delete, and overwrite assets in other workspaces. All versions prior to 1.3.1 are affected. CVE-2026-46558 Plane’s V2 asset subsystem trusted...
📄 TypeBot Server-Side Request Forgery
TypeBot versions prior to 3.16.0 suffer from a server-side request forgery vulnerability. CVE-2026-34207 The SSRF filter checked hostname text, but the actual destination was decided later by DNS. That gap let attacker-controlled Webhook URLs reach loopback, metadata, and private network targets...
📄 Docmost 0.70.x Authorization Bypass
A low-privileged Docmost user could supply a victim attachmentId to the generic upload endpoint and overwrite another page's stored attachment inside the same workspace. Versions 0.3.0 through 0.70.x are affected. CVE-2026-34213 A low-privileged Docmost user could supply a victim attachmentId to...
netproto_toolkit
netprototoolkit Network protocol security research toolkit i...
pentest-cheatsheet
pentest-cheatsheet Commands, techniques and notes for penetrat...