EUVD-2025-26308

A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. Impacted is an unknown function of the file loginattendance2.php. Performing manipulation of the argument employeeid/date results in sql injection. The attack can be initiated remotely. The exploit has been...

EUVD-2025-26311

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected by this issue is the function fromIpsecitem of the file /goform/IPSECsave of the component httpd. Executing manipulation of the argument ipsecno can lead to stack-based buffer overflow. The attack may be performed from remote...

Exploit for CVE-2026-53787

Def4cer A Secure Version of CVE-2026-53787 Amasty Order Attrib...

clr-cve

clr-cve Shared CVE prioritisation for clr security tools. One...

skill-exploit-research

exploit-research A general Hermes security skill: find whethe...

leeway

Leeway is a heavily caching build system for Go, Typescript and Docker projects...

CVE-2021-43258

CVE-2021-43258 ChurchInfo 1.2.13-1.3.0 Remote Code Execution Exploit Full title| ChurchInfo 1.2.13-1.3.0 Remote Code Execution Exploit ---|--- Date add| 21-11-2022 Category| remote exploits Platform| php Risk| Security RiskCritical Description| This Metasploit module exploits the logic in the...

schizo-host

relapse PS5 WebKit + kernel exploit chain relapse / aio, fi...

CVE-2026-41940

CVE-2026-41940 - cPanel/WHM Auth Bypass Scanner & Exploit Tool cPanel/WHM Authentication Bypass Scanner & Exploit Tool for CVE-2026-41940 ⚠️ Disclaimer This tool is provided for educational purposes and authorized security testing only. By using this tool, you agree that: You will only test system...

exploit-path

Exploit Path Graph Hacks FalkorDB × WeMakeDevs, Track 1:...

AutoSec

面向代码工程的自动化安全评估流水线——输入一个 Git 仓库或源码压缩包，输出一份含可复现漏洞证据、多步攻击链拓扑、可直接采纳修复补丁的结构化安全评估报告。...

CVE-2026-15575

Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

EUVD-2026-102828

Active debug code vulnerability in SFM Software Technologies Inc. Costifier allows Exploit Non-Production Interfaces. This issue affects Costifier: through 2026-10-16. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

QR-Exploit-Rdy7d3r

QR-Exploit-Rdy7d3r Pegasus QR-EXPLOIT — A cybersecurity resear...

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

Astra Linux – vulnerability in Chromium

Improper implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy via a crafted HTML page. Chromium security severity: High...

Astra Linux – vulnerability in Chromium

An improper implementation in Google Lens within Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to bypass navigation restrictions by using a specially crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in edk2

EDK2 contains a vulnerability in the BIOS, where a user can cause an Integer Overflow or Wrap-around error through network means. Successful exploitation of this vulnerability may lead to a denial of service...

Astra Linux – Vulnerability in Chromium

Before version 150.0.7871.46, writing Tint in Google Chrome allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in XML in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...