4628 matches found
EUVD-2026-33272
A flaw was found in the Quay config-tool's GitLab OAuth validator. This vulnerability causes sensitive credentials, specifically clientid and clientsecret, to be transmitted as plaintext in URL query parameters during POST requests to the GitLab endpoint. This insecure transmission can lead to th...
Exploit for CVE-2026-47100
CVE-2026-47100 — FunnelKit / Funnel Builder for WooCommerce Ch...
portswigger-sqli-labs
PortSwigger Web Security Academy — SQL Injection Labs All 18...
watch-tower
OT/ICS Threat Intelligence Lab Local threat intelligence lab...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Lab — React Server Components RCE !Dockerh...
CVE-2026-24554
Cross-Site Request Forgery CSRF vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery. This issue affects WPSubscription: from n/a through 1.9.1...
CVE-2026-24554
Cross-Site Request Forgery CSRF vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery. This issue affects WPSubscription: from n/a through 1.9.1...
EUVD-2026-31755
Cross-Site Request Forgery CSRF vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery. This issue affects WPSubscription: from n/a through 1.9.1...
CVE-2026-24554
Affected software: WordPress WPSubscription plugin (versions up to 1.9.1). Issue: Cross-Site Request Forgery (CSRF) vulnerability as described in CVE-2026-24554. CVSS v3.1 base score: 4.3 (Medium); attack vector NETWORK, attack complexity Low, privileges required None, user interaction Required, ...
exploit-lab
Threadbare — Exploit-Development Training Lab Introduction...
PT-2026-43138
Name of the Vulnerable Software and Affected Versions WPSubscription versions prior to 1.9.2 Description A Cross-Site Request Forgery CSRF flaw exists in the Convers Lab WPSubscription plugin. This issue allows an attacker to induce a victim to perform unintended actions on the web application by...
CVE-2026-24554: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery. This issue affects WPSubscription: from n/a through 1.9.1...
Exploit for CVE-2025-13673
CVE-2025-13673 — Tutor LMS SQL Injection Lab Unauthenticated...
xss-reflected-lab
No d...
web-app-security-lab
Vulnerable Web App — Attack & Defend Lab A deliberately-vulne...
Exploit for Unrestricted Upload of File with Dangerous Type in Wordpress
WordPress Crop Image RCE — CVE-2019-8942 / CVE-2019-8943 Pyth...
Malicious code in @cloudways-lab/unified-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d7eef784b4e8296e2533e27c1afb116c4c519ac9adda0fbb53661ce6d01e060 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-4257 Malicious code in @cloudways-lab/unified-design-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d7eef784b4e8296e2533e27c1afb116c4c519ac9adda0fbb53661ce6d01e060 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...