279386 matches found
π Sequelize 6.37.7 SQL Injection
A remote SQL injection vulnerability exists Sequelize versions 6.37.7 and below in the JSON/JSONB where clause processing. When Sequelize parses a JSON path key containing ::, the value after :: is treated as a SQL cast type and is inserted into the generated SQL without proper validation. If an...
π SQLite 3.50.1 winsqlite3.dll Heap Overflow
This Metasploit local exploit module targets a heap overflow vulnerability in winsqlite3.dll in SQLite versions prior to 3.50.2 on Windows systems. It first attempts to detect the installed SQLite version, then generates a specially crafted database and SQL workload containing an excessive number...
π Windows Cloud Files Tiering Engine Local Privilege Escalation
his Metasploit local exploit module models a Windows privilege escalation scenario involving Cloud Files, NTFS reparse points, named pipes, and service interaction. The workflow simulates abusing file system operations and cloud sync mechanisms by creating controlled directories, placeholder file...
π V8 BigInt String Conversion Stress Test Conceptual Sandbox
This is a V8 Sandbox Escape vulnerability in BigInt::Allocate where buffers are shuffled outside the sandbox. The vulnerability allows for writes outside the boundaries of the allocated buffer within the sandbox outbound write by manipulating data during the MultiplyFFT process...
π Vienna Assistant 1.2.542 macOS Privilege Escalation
A macOS helper service interface implemented via NSXPC was observed exposing methods that may allow privileged operations such as file writing and command execution through a remote proxy connection...
π OWASP CRS 3.3.9 / 4.25.x LTS / 4.8.x File Upload Bypass
This proof of concept demonstrating a weakness in some web applications protected by OWASP Core Rule Set CRS or similar filters, where file upload validation can be bypassed using ambiguous filename formatting...
π node-tesseract-ocr 2.2.1 Command Injection
In node-tesseract-ocr version 2.2.1, a security vulnerability allows OS command injection when attacker-controlled image paths are passed to the OCR function. ================================================================================================================================== | Title...
π thumbler 1.1.2 Command Injection
The thumbler package through version 1.1.2 contains a critical command injection vulnerability in the thumbnail function. User-supplied input parameters input, output, time, size are concatenated into a single ffmpeg command string and executed via childprocess.exec without proper sanitization. A...
info-security-portfolio
Information Security Portfolio A curated collection of nine e...
secureflow
AI-Powered Smart Contract Security Scanner An automated block...
DarkWin-NGASR
π DARKWIN β Next-Gen Automated Security Research Develope...
denuOwO-hypervisor-vulnerabilities
DenuOwO SVM/VMX Hypervisor β 6 Vulnerabilities PoC + Analysis...
Advanced-AI-Recon-and-Exploit-Framework
reNgine: The Ultimate Web Reconnaissance & Vulnerability Scanner...
Exploit for CVE-2025-8061
CVE-2025-8061 is a privilege escalation vulnerability in Lenovo'...
angband
Angband - Kernel Exploit Framework A staged, modular framew...
smooth-pentest-agent
No d...