280830 matches found
agent-security-guide
本项目提供针对OpenClaw平台的AI Agent安全治理方案，解决AI Agent权限失控、风险难量化、治理难落地、合规难满足等核心问题。目标可10分钟完成安全评估，一键加固提升安全评分，提供完整治理工具与指南，帮助您高效满足等保2.0、OWASP等合规要求。...
Exploit for Path Traversal in Tp-Link Tapo_C260_Firmware
Tapo C260 RCE Chain CVE-2026-0651 / CVE-2026-0652 / CVE-2026-...
UacExploit
🛡️ UACExploit - Windows UAC Bypass Hidden This tool is a P...
Exploit for CVE-2023-39848
DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...
Exploit for CVE-2026-3304
CVE-2026-3304 Lab Environment This repository is a vulner...
Exploit for Path Traversal in Mindsdb
cve-2026...
Exploit for CVE-2026-20131
CVE-2026-20127---Cisco-SD-WAN-Preauth-RCE Cisco SD-WAN Zero-...
Exploit for CVE-2026-20131
CVE-2026-20131 — Cisco FMC Insecure Java Deserialization RCE...
Exploit for CVE-2026-20079
CVE-2026-20079 — Cisco FMC Authentication Bypass Descripti...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Next.js RCE Scanner !Licensehttps://img.sh...
Exploit for CVE-2023-3452
Metersploit exploit module canto RCE CVE-2024-25096 & CVE-2023...
Exploit for CVE-2024-3912
Why? Publishing because Mirai are a bunch of irrit...
📄 psd-tools Denial of Service
When a specially crafted PSD file contains malformed RLE-compressed image data for example, a literal run extending beyond the expected row size, the internal decoderle function raises a ValueError in psd-tools, resulting in a denial of service condition...
📄 Apache Artemis / ActiveMQ Artemis Missing Authentication
Proof of concept exploit for CVE-2026-27446 targeting Apache Artemis versions 2.50.0 through 2.51.0 and Apache ActiveMQ Artemis versions 2.11.0 through 2.44.0...
📄 joserfc JWE PBES2 1.6.2 Denial of Service
A denial of service condition can occur in applications using the joserfc library when processing malicious JSON Web Encryption tokens that use the PBES2-HS256+A128KW algorithm...
📄 OpenEXR Integer Overflow
Proof of concept exploit for a potential integer overflow condition when processing specially crafted multi‑part DeepScanLine EXR files with OpenEXR. The program generates a malicious .exr file containing 86 parts, where each pixel is assigned 50,000,000 samples. When these values are summed...
📄 pypdf Memory Exhaustion / Denial of Service
pypdf versions prior to 6.7.3 were vulnerable to a denial of service condition caused by uncontrolled memory allocation during decompression of XFA streams. An attacker could craft a malicious PDF file containing a highly compressed stream using /FlateDecode...
📄 MajorDoMo Remote Code Execution
A critical vulnerability in the MajorDoMo web console allows unauthenticated remote attackers to execute arbitrary system commands on the target server. By sending crafted requests to the /admin.php endpoint with manipulated console parameters, an attacker can inject and execute PHP code remotely...
📄 Siklu EtherHaul Series EH-8010 / EH-1200 File Upload
PHP proof of concept for a critical vulnerability that exists in Siklu EtherHaul EH-8010 and EH-1200 devices running firmware versions 7.4.0 through 10.7.3. The rfpiped service exposed on TCP port 555 uses hardcoded AES-256-CBC encryption parameters static key and IV and lacks any authentication...