11020 matches found
ysoserial.net
A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discovered in common .NET libraries that can, under the right conditions, exploit .NET...
Formidable Forms < 2.05.02 - Cross-Site Scripting
Formidable Form Builder for WordPress versions before 2.05.03 contains a stored cross-site scripting caused by insufficient input sanitization and output escaping in form parameters like 'afterhtml', letting unauthenticated attackers inject and execute arbitrary scripts in victims' browsers id:...
catsploit
CATSploit🐈 CATSploit is an automated penetration testing tool using Cyber Attack Techniques Scoring CATS method that can be used without pentester. Currently, pentesters implicitly made the selection of suitable attack techniques for target systems to be attacked. CATSploit uses system...
CVE-2026-55073
WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applications that configure a restrictive urlfetcher and pass attacker-influenced values to HTML.writepdf can have the restriction bypassed through the xmpmetadata or stylesheets options. In weasyprint/pdf/init.py...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Ruby-Rack
There is a possible denial-of-service vulnerability in Rack versions 2.0.9.1, 2.1.4.1, and 2.2.3.1, specifically in the multipart parsing component of Rack...
CVE-2024-21111
These binaries were built from source using mansk1es code. https://github.com/mansk1es/CVE-2024-21111 Prebuilt binaries for Privilege Escalation in Oracle VM Virtual box prior to 7.0.16...
CVE-2018-16858-Python
CVE-2018-16858-Python Implementación en Python de CVE-2018-16858 Basado en el trabajo de aquí y aquí...
snyk-js-jquery-565129
Este repositorio contiene los parches para CVE-2020-11022 y CVE-2020-11023 que afectan a todas las versiones de jQuery anteriores a la 3.5.0, incluyendo los parches de DanielRuf/snyk-js-jquery-174006. Estos parches se generaron con diff -u original patched patchfile. Aplicar los parches Puede...
CVE-2025-11371
Disclaimer This project is published for educational and research purposes only. Use of this software for attacking targets without explicit prior consent is illegal. The author is not responsible for any misuse, damage, or legal consequences resulting from the use of this code. Always follow...
CVE-2026-87614
Incorrect authorization in ServiceWorker in Google Chrome prior to 153...
CVE-2026-87604
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 al...
CVE-2026-87516
Observable discrepancy in Navigation in Google Chrome prior to 153.0.8...
CVE-2026-87464
Use after free in WebGL in Google Chrome prior to 153.0.8010.36 allowe...
CVE-2026-87567
UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0...
CVE-2026-87584
Incorrect authorization in WebUI in Google Chrome prior to 153.0.8010...
CVE-2026-87598
Incorrect authorization in ServiceWorker in Google Chrome prior to 153...
CVE-2026-87617
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 all...