4257 matches found
EUVD-2024-42416
Malicious code in bioql PyPI...
CodeQL zero to hero part 5: Debugging queries
When you're first getting started with CodeQL, you may find yourself in a situation where a query doesn't return the results you expect. Debugging these queries can be tricky, because CodeQL is a Prolog-like language with an evaluation model that's quite different from mainstream languages like...
CVE-2025-59842 JupyterLab LaTeX typesetter links did not enforce `noopener` attribute
jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to version 4.4.8, links generated with LaTeX typesetters in Markdown files and Markdown cells in JupyterLab and Jupyter Notebook did not include the noopener...
JupyterLab LaTeX typesetter links did not enforce `noopener` attribute
Links generated with LaTeX typesetters in Markdown files and Markdown cells in JupyterLab and Jupyter Notebook did not include the noopener attribute. This is deemed to have no impact on the default installations. Theoretically users of third-party LaTeX-rendering extensions could find themselves...
Exploit for Improper Input Validation in Microsoft
Email exploit Moniker Link-CVE-2024-21413-Module ā Documentati...
Exploit for Deserialization of Untrusted Data in Bentoml
Day 09 ā CVE-2025-27520 BentoML-style insecure deserializatio...
Vulnlab
It is an offensive tool for learning and documentation. This rep...
cs253.stanford.edu
It is an offensive tool for web application security education. The repository contains a collection of assignments and exercises for the CS 253 Web Security course at Stanford University. The assignments are designed to educate students on various web security topics, including client-side...
Exploit for Code Injection in Foxcms
Day06 ā FoxCMS-style RCE CVE-2025-29306 ā Educational lab T...
MSc-Cybersecurity-Capstone-Android-Exploitation
MSc Cybersecurity Capstone Project Title: Android Exploit...
Exploit for Use After Free in Microsoft
CVE Analysis & Detection ā PoCs, Snort Detection, and Mitigati...
Exploit for Incorrect Authorization in Vercel Next.Js
CVE-2025-29927 Research and Safe Testing Framework This repos...
WordPress Lab Theme <= 1.0.0 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Theme Lab versions = 1.0.0...
WordPress Lab Theme <= 1.0.0 is vulnerable to Local File Inclusion
Software Lab Type Theme Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID a830ef2cbee5 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity Require...
SQL Injection
apachesuperset is vulnerable to SQL Injection. The vulnerability is due to improper enforcement of the DISALLOWEDSQLFUNCTIONS security feature, which allows an attacker with SQL Lab access to circumvent the denylist using a special inline block and execute restricted SQL functions...
Exploit for CVE-2025-23266
cve-2025-23266-migration-bypass cve...
Exploit for SQL Injection in Sangoma Freepbx
Work in Progress FreePBX CVE-2025-57819 Lab - Unauth SQLi ā...
Exploit for Unrestricted Upload of File with Dangerous Type in Codedropz Drag_And_Drop_Multiple_File_Upload_-_Contact_Form_7
CVE-2025-3515 WordPress Lab Drag and Drop Multiple File Uploa...
CVE-2025-57778
There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid source address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a...
Iām Spending the Year at the Munk School
This academic year, I am taking a sabbatical from the Kennedy School and Harvard University. It's not a real sabbatical--I'm just an adjunct--but it's the same idea. I will be spending the Fall 2025 and Spring 2026 semesters at the Munk School at the University of Toronto. I will be organizing a...