Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Lab — React Server Components RCE !Dockerh...

CVE-2026-24554

Cross-Site Request Forgery CSRF vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery. This issue affects WPSubscription: from n/a through 1.9.1...

CVE-2026-24554

Cross-Site Request Forgery CSRF vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery. This issue affects WPSubscription: from n/a through 1.9.1...

CVE-2026-24554

Affected software: WordPress WPSubscription plugin (versions up to 1.9.1). Issue: Cross-Site Request Forgery (CSRF) vulnerability as described in CVE-2026-24554. CVSS v3.1 base score: 4.3 (Medium); attack vector NETWORK, attack complexity Low, privileges required None, user interaction Required, ...

EUVD-2026-31755

Cross-Site Request Forgery CSRF vulnerability in Convers Lab WPSubscription allows Cross Site Request Forgery. This issue affects WPSubscription: from n/a through 1.9.1...

exploit-lab

Threadbare — Exploit-Development Training Lab Introduction...

PT-2026-43138

Name of the Vulnerable Software and Affected Versions WPSubscription versions prior to 1.9.2 Description A Cross-Site Request Forgery CSRF flaw exists in the Convers Lab WPSubscription plugin. This issue allows an attacker to induce a victim to perform unintended actions on the web application by...

Exploit for CVE-2025-13673

CVE-2025-13673 — Tutor LMS SQL Injection Lab Unauthenticated...

xss-reflected-lab

No d...

web-app-security-lab

Vulnerable Web App — Attack & Defend Lab A deliberately-vulne...

Exploit for Unrestricted Upload of File with Dangerous Type in Wordpress

WordPress Crop Image RCE — CVE-2019-8942 / CVE-2019-8943 Pyth...

MAL-2026-4257 Malicious code in @cloudways-lab/unified-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d7eef784b4e8296e2533e27c1afb116c4c519ac9adda0fbb53661ce6d01e060 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @cloudways-lab/unified-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6d7eef784b4e8296e2533e27c1afb116c4c519ac9adda0fbb53661ce6d01e060 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for CVE-2024-53667

CVE-2024-53677 — How the Exploit Works and How to Run It V...

Exploit for CVE-2026-0211

ISU-SecOps Nginx QUIC RCE Lab Modern web sunucularındaki Ngi...

lab-xss

XSS Vulnerability Lab Aplikasi web statis untuk simulasi dan...

drupal-sa-core-2026-004-lab

SA-CORE-2026-004 — Lab, PoC, and Post-mortem Drupal core SQ...

CLSA-2026-1779293372 Update of kernel

New FIPS build for lab review incorporating the els13..35 patches and CVE references...

Exploit for CVE-2026-42945

NGINX CVE-2026-42945 Rift — local defensive lab Two Dockeri...

securite-des-reseaux-informatiques

Sécurité des Réseaux Informatiques d'Entreprise - Projet Pytho...