29550 matches found
JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)
Description A language pack ships a Plural-Forms header saying how the language counts, for example nplurals=2; plural=n != 1;. JupyterLab turns that string into a function with new Function, so the header gets executed. The check that meant to keep it safe was a regular expression. The regex was...
FUCKER
FUCKER Windows-нативный фреймворк для пентестинга, написанный на Go. Модульная архитектура с движком принятия решений на базе ИИ API, совместимый с OpenAI. Сборка go build -ldflags="-X main.version=$git describe --tags" -o FUCKER.exe ./cmd/fucker/ Кросс-компиляция: GOOS=linux GOARCH=amd64 go buil...
CVE-2017-8046-DEMO
spring data rest CVE-2017-8046 демонстрационный тест пожалуйста, ОБНОВИТЕ spring data rest СЕЙЧАС. шаги Запустите это приложение Создайте тестовый экземпляр POST /entityPersons/ HTTP/1.1 Host: localhost:8080 Content-Type: application/json Cache-Control: no-cache "firstName":"f2" Используя...
CVE-2017-1000117
CVE-2017-1000117 - PoC git clone --recurse-submodules "https://github.com/Manouchehri/CVE-2017-1000117.git" cat /tmp/pwned.txt Go go get "github.com/Manouchehri/CVE-2017-1000117" cat /tmp/pwned.txt...
DirtyCow
DirtyCow - Эксплойт Приведенный ниже код использует известную уязвимость Dirty COW CVE-2016-5195 для повышения привилегий и получения root-доступа. Перед запуском раскомментируйте sc для вашей платформы в main.c. Компиляция: gcc main.c -o dirtycow -lpthread...
CVE-2025-66478-github-patcher
Correcteur automatique de CVE Next.js Outil d'automatisation écrit en Go pour scanner les dépôts GitHub, détecter les versions vulnérables de Next.js CVE-2025-66478 et créer automatiquement des Pull Requests avec le correctif de sécurité spécifique. 📋 Prérequis Assurez-vous d'avoir installé et...
Heartbleed
Heartbleed Чекер сайт и инструмент для CVE-2014-0160. Публичный сайт: https://filippo.io/Heartbleed/ Использование инструмента: Heartbleed -service="servicename" example.com:443 Heartbleed servicename://example.com:443 Коды выхода: 0 — БЕЗОПАСНО; 1 — УЯЗВИМО; 2 — ОШИБКА. недавно изменено Объяснен...
CVE-2023-23752
CVE-2023-23752 Joomla Information disclosure exploit code written in C++...
cve-2013-2094
= CVE-2013-2094 code for http://timetobleed.com/a-closer-look-at-a-recent-privilege-escalation-bug-in-linux-cve-2013-2094/ == How to build You need to build the C file of your choice like this: gcc -O2 file-name.c -O2 is required due to how the exploit actually works see the blog post for more...
CLEANSTART-2024-IK84393 attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse
CVE-2022-32149 affects multiple packages. An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse. See references for individual vulnerability details...
IfritProxy
🔥 AI-Powered Threat Deception & Intelligence Platform Turn attackers into intelligence sources with adaptive honeypot responses 📦 Quick Start • ✨ Features • 🔄 How It Works • 📚 Docs • 🔌 API Brought to the community by 🎯 What is IFRIT? IFRIT is an intelligent reverse proxy that sits between the...
thrift: thrift: Denial of Service via excessive memory allocation
A flaw was found in Apache Thrift. Multiple language bindings fail to properly restrict memory allocation when processing input containing excessive size values. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted requests, consuming available memory and...
thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer
A flaw was found in Apache Thrift's D language implementation within the TNonblockingServer component. Due to improper handling of exceptional conditions and improper resource shutdown, an uncaught exception can occur during server operations. A remote, unauthenticated attacker could exploit this...
thrift: thrift: Denial of Service via infinite loop in D language bindings
A flaw was found in Apache Thrift's D language bindings. A remote, unauthenticated attacker could cause a Denial of Service DoS by sending specially crafted input to an affected application. This input triggers an integer underflow or an unhandled exception, causing the process to enter an infini...
ROOT-APP-GOBINARY-CVE-2026-33186 CVE-2026-33186 in google.golang.org/grpc - Patched by Root
Root has patched CVE-2026-33186 in the google.golang.org/grpc package for Root:Go. Multiple fixed versions available...
deleting-the-trace
Атаки с внедрением управляющих токенов на агентов, использующих инструменты Код и зарегистрированные измерения для исследования двух атак на уровне входных данных на агентов на основе языковых моделей, использующих инструменты. Первая атака добавляет короткую строку собственных управляющих токено...
CVE-2026-86472 vulnerabilities
Vulnerabilities for packages: prism, vitess, yaml-language-server, jupyter-base-notebook...
GHSA-HRR3-GC8F-F4QJ vulnerabilities
Vulnerabilities for packages: prism, vitess, yaml-language-server, jupyter-base-notebook...
