228518 matches found
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder...
CVE-2026-78250
A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly available and might be used. This...
CVE-2022-30136
CVE-2022-30136 Exploit remoto del sistema di file di rete Windows DoS PoC PoC: https://github.com/fortra/CVE-2022-30136 Dettagli: https://www.coresecurity.com/core-l...136-windows-network-file-system-vulnerability Prodotti interessati : Windows Server 2016, 2019...
CVE-2020-11110-Proof-of-Concept
Questo repository non contiene un README...
dirty-pipe
Dirty Pipe - CVE-2022-0847 Questo è semplicemente il codice e le istruzioni per utilizzare l'exploit di Max Kellermann per CVE-2022-0847 noto come Dirty Pipe. Visita https://dirtypipe.cm4all.com/ per leggere di più su come funziona l'exploit! Come utilizzare 1. Scarica e compila il binario...
CVE-2026-59565
CVE-2026-59565 is a remotely exploitable buffer overflow in Zscaler Client Connector on Windows that can lead to a local and kernel denial-of-service . The CVSS 3.1 score is 8.8 (HIGH) (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). CISA's SSVC assessment indicates no known exploitation , the vulnerabilit...
grafanaExp
grafanaExp Utilizza la vulnerabilità di lettura arbitraria dei file CVE-2021-43798 di Grafana, rileva automaticamente se esiste una vulnerabilità, i plugin presenti, estrae la chiave, decifra il file db del server e restituisce le informazioni datasourrce. Utilizzo Fornisce funzionalità exp e...
CVE-2026-78250 bytebot-ai bytebot Agent Execution Workflow infinite loop
A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly available and might be used. This...
CVE-2026-78250
bytebot-ai bytebot 0.0.1 is affected by a vulnerability in the Agent Execution Workflow component where manipulation of an unknown function leads to an infinite loop , resulting in a denial of service (availability impact only). The attack can be performed remotely and requires low privileges (CV...
Exploit for CVE-2026-18963
POC-CVE-20...
CVE-2026-78247
A SQL injection vulnerability exists in SourceCodester Simple Online Food Ordering System 1.0 , triggered through manipulation of the ID argument in the file /fos/admin/ajax.php?action=confirm_order. The flaw allows a remote, unauthenticated attacker to inject SQL commands, leading to low impact ...
CVE-2026-78247 SourceCodester Simple Online Food Ordering System ajax.php confirm_order sql injection
A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...
EUVD-2026-64838
A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirmorder. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has be...
CVE-2023-23752
Installation root@kitploit: git clone https://github.com/0xx01/CVE-2023-23752.git cd CVE-2023-23752 chmod +x exploit.sh Verwendung root@kitploit: ./exploit.sh http://localhost...
CVE-2026-78244
A SQL injection vulnerability exists in itsourcecode Real Estate Management System 1.0 , specifically in the file search.php . Manipulating the arguments search, delivery_type, search_price, or property_type allows an unauthenticated remote attacker to inject SQL, with no user interaction require...
EUVD-2026-64777
A vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/deliverytype/searchprice/propertytype results in sql injection. The attack may be initiated...
Astra Linux – Vulnerability in Apache2
When an HTTP/2 stream is reset by a client via an RST frame, there is a time window during which the memory resources associated with the request are not immediately reclaimed. Instead, the deallocation of these resources is delayed until after the connection is closed. This allows clients to...
Astra Linux – Vulnerability in Chromium
In Google Chrome versions prior to 87.0.4280.88, uninitialized use of V8 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in tab groups in Google Chrome prior to version 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...