4628 matches found
SECpocs
Next.js React Server Components RCE Exploit Exploits CVE-2025...
Exploit for Insecure Default Initialization of Resource in Praison Praisonai
CVE-2026-44338 PraisonAI Authentication Bypass Lab Local Dock...
Exploit for Improper Access Control in Joomla Joomla\!
Full-Lifecycle CMS Penetration Testing Joomla 4.2.5 📌 Pr...
Challenge_Unix-
Copy Fail — CVE-2026-31431 Lab Introducción a UNIX · UIDE ·...
Exploit for CVE-2026-46300
Security Research & Legal Disclaimer This repository is for educ...
Exploit for CVE-2026-46300
⚠️ Security Research & Legal Disclaimer 📌 Purpose of This...
Windows-pentest-lab
Windows-pentest-lab Penetration testing and vulnerability asse...
CVE-2026-42266
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab. The Py...
CVE-2026-42266 JupyterLab has an Extension Manager API/GUI Policy Discrepancy allowing 3rd party (malicious) extensions install via POST request.
JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab. The Py...
jupyter-jupyterlab-4.5.7-1.1 on GA media (moderate)
jupyter-jupyterlab-4.5.7-1.1 on GA media Announcement ID: openSUSE-SU-2026:10748-1 Rating: moderate Cross-References: CVE-2026-40171 CVE-2026-42266 CVE-2026-42557 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all securi...
wafuzz
wafuzz — Web Pentesting Orchestrator Interactive CLI web secu...
Exploit for CVE-2026-5718
CVE-2026-5718 Local Docker Lab Local-only vulnerable vs patch...
Exploit for Race Condition Enabling Link Following in Linuxfoundation Runc
CVE-2025-31133 Compose Build Lab This lab is a small PaaS sim...
Convolutional-Neural-Networks for Deanonymisation of I2P Traffic
This study investigates the potential for deanonymizing services within the Invisible Internet Project I2P network through passive traffic analysis and machine learning techniques. The primary objective is to identify distinctive patterns in I2P traffic despite the encryption of its payload. To...
BIT-JUPYTERLAB-2026-40171 Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker
In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with...
BIT-JUPYTER-BASE-NOTEBOOK-2026-40171 Jupyter Notebook and JupyterLab token theft via stored XSS in help command linker
In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cross-site scripting issue in the help command linker can be chained with...
OPENSUSE-SU-2026:10748-1 jupyter-jupyterlab-4.5.7-1.1 on GA media
These are all security issues fixed in the jupyter-jupyterlab-4.5.7-1.1 package on the GA media of openSUSE Tumbleweed...
GHSA-3258-QMV8-FRP3 free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers
Summary free5GC's SMF mounts the UPI management route group without OAuth2/bearer-token authorization middleware. A network attacker who can reach SMF on the SBI can hit UPI endpoints with no Authorization header at all, and the requests reach the SMF business handlers. In the running Docker lab...