4260 matches found
exploit-labs
exploit-labs Companion code for the Windows-security blog at...
cybersec-mcp
🛡️ Cybersecurity Professor MCP Server Prof. Null — Tu pro...
Metasploit-Simulation-lab
🛡️ Metasploit Simulation Lab — Ethical Hacking Training !alt...
CVE-2026-48839
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in VeronaLabs WP Statistics allows DOM-Based XSS. This issue affects WP Statistics: from n/a through 14.16.6...
portswigger-labs
PortSwigger Web Security Academy — Lab Notes Notes from compl...
Software-Security-Exploits
Software Security: Privilege Escalation Attacks SEED Labs pro...
shopper 安全漏洞
Shopper is an open-source e-commerce management backend developed by Shopper Labs. Versions of Shopper prior to 2.8.0 contained a security vulnerability. This vulnerability stemmed from the CreateOrderFromCartAction::execute function, which created order lines before checking and increasing the...
PT-2026-44815
Name of the Vulnerable Software and Affected Versions Waterfall WF-500 TX and RX Hosts version 7.9.1.0 R2502171040 Description The Console WebUI contains an OS Command Injection issue, which occurs when special elements used in an OS command are not properly neutralized. This allows remote...
portswigger-sqli-labs
PortSwigger Web Security Academy — SQL Injection Labs All 18...
portswigger-xss-labs
PortSwigger Web Security Academy — XSS Labs All 30 Completed...
Autopsy 4.23.1
Autopsy is the premier end-to-end open source digital forensics platform. Built by Sleuth Kit Labs with the core features you expect in commercial forensic tools, Autopsy is a fast, thorough, and efficient hard drive investigation solution that evolves with your needs...
human-connection-ctf
Human Connection Challenge: CTF Writeup Platform: Immersi...
⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos
Monday recap. Same mess, new week. A sketchy dev tool got people pwned, old bugs came back from the dead, and security products somehow needed protecting from themselves. A bunch of companies spent the week checking old boxes and forgotten servers they should've patched years ago. Good times...
SWPT-Notes
SWPT-Notes Personal study notes compiled while working throug...
Grafana Labs < 11.6.14+security-04 / 12.2.0 < 12.2.8+security-04 / 12.3.0 < 12.3.6+security-04 / 12.4.0 < 12.4.3+security-02 / 13.0.0 < 13.0.1+security-01 Multiple Vulnerabilities
The version of Grafana Labs installed on the remote host is affected by multiple vulnerabilities, including: - A broken access control flaw in the Snapshot API allows any Editor to delete dashboard snapshots, even those they have no read or write access to. CVE-2026-28380 - When using an IPv6...
Exploit for CVE-2026-42945
NGINX CVE-2026-42945 Rift — local defensive lab Two Dockeri...
CVE-2026-42960
creationtimestamp| type| source ---|---|--- 2026-05-20 10:36:25+00:00| seen| https://social.nlnetlabs.nl/users/nlnetlabs/statuses/116606458492280712 2026-05-20 10:58:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbqqjqwms2i 2026-06-20 13:23:38+00:00| seen|...
CVE-2026-41292
creationtimestamp| type| source ---|---|--- 2026-05-20 10:36:25+00:00| seen| https://social.nlnetlabs.nl/users/nlnetlabs/statuses/116606458492280712 2026-05-20 10:55:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmbqlnf6vp2k 2026-07-28 08:45:20+00:00| seen|...
AZL-87030 CVE-2026-41292 affecting package unbound for versions less than 1.25.1-1
NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options. An adversary sending queries with too many EDNS options can hold Unbound threads hostage while they are parsing and creating internal data...