4194 matches found
Ofensive-security
This repository contains my Offensive Cyber Security / Penetrati...
Ofensive-security-Portfolio
This repository contains my Offensive Cyber Security / Penetrati...
Silicon Labs Zigbee Stack security vulnerabilities
Silicon Labs Zigbee Stack is a wireless network protocol stack developed by Silicon Labs. There is a security vulnerability in the Silicon Labs Zigbee Stack, and this vulnerability arises from processing 802.15.4 MAC data requests, which may cause Zigbee routers to become unrecoverably disconnect...
Zeek 8.0.6
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
CVE-2026-21509-PoC Educational PoC for CVE‑2026‑21509...
FSPro Labs Event Log Explorer code-related vulnerabilities
FSPro Labs Event Log Explorer is a log analysis tool developed by FSPro Labs. Version 4.9.3 of FSPro Labs Event Log Explorer contains a code vulnerability caused by an unquoted service path. This vulnerability could allow local users to execute arbitrary code and gain system privileges...
CVE-2018-1000203
Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f latest release as of Sept 2017 contains an intentional backdoor vulnerability in the function zerofeetransaction that can result in theft of Soar Coins by the "onlycentralAccount" Soar Labs after...
CVE-2021-41593
Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure...
CVE-2022-26507
A heap-based buffer overflow exists in XML Decompression DecodeTreeBlock in AT Labs Xmill 0.7. A crafted input file can lead to remote code execution. This is not the same as any of: CVE-2021-21810, CVE-2021-21811, CVE-2021-21812, CVE-2021-21815, CVE-2021-21825, CVE-2021-21826, CVE-2021-21828,...
CVE-2020-10591
An issue was discovered in Walmart Labs Concord before 1.44.0. CORS Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers, and are not configurable. This allows remote attackers to discover host information, nodes, API metadata, and references to usernames via...
CVE-2023-25061
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Kiboko Labs Arigato Autoresponder and Newsletter plugin = 2.7.1.1 versions...
CVE-2023-25022
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Kiboko Labs Watu Quiz plugin = 3.3.8 versions...
CVE-2023-4897
Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...
CVE-2023-4020
An unvalidated input in a library function responsible for communicating between secure and non-secure memory in Silicon Labs TrustZone implementation allows reading/writing of memory in the secure region of memory from the non-secure region of memory...
CVE-2023-4280
An unvalidated input in Silicon Labs TrustZone implementation in v4.3.x and earlier of the Gecko SDK allows an attacker to access the trusted region of memory from the untrusted region...
CVE-2023-4899
SQL Injection in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...
CVE-2023-4898
Authentication Bypass by Primary Weakness in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...
CVE-2021-27447
Mesa Labs AmegaView version 3.0 is vulnerable to a command injection, which may allow an attacker to remotely execute arbitrary code...