20848 matches found
bounty-hunter-framework
Claude Bounty Hunter Framework Professional bug bounty hunt...
GHSA-QQW8-7C2R-JXCH Sigstore Java has a vulnerability with bundle verification of integratedTime
Summary Regression: Verification of integratedTime from Rekor V1 Log Entry against Fuclio Certificate validity was missing Details - PR 1008 erroneously removed verification of the integrated Rekor entry time against the Fulcio certificate. - PR 1185 re-added this verification with enhancements...
cossacks-back-to-war-exploit
⚠️ Disclaimer The code in this repository is provided as-i...
Exploit for CVE-2026-31694
FUSE readdir cache out-of-bounds write PoC Local proof of con...
exploitarium
If you wish to collaborate/discuss with me, contact me on discor...
CVE2PoC Exploit Finder
CVE2PoC is a tool that helps penetration testers, bug hunters, and security researchers quickly find public exploits, proof of concepts PoCs, and advisories related to a CVE ID...
0-day-PoC-Repo
If you wish to collaborate/discuss with me, contact me on discor...
Exploit for CVE-2026-43503
CVE-2026-43503 DirtyClone - PoC - SecurewithUmer POC of Dir...
Exploit for Uncontrolled Resource Consumption in Github Cmark-Gfm
graylog-cve-2023-24824-exploit Proof-of-...
Exploit for Improper Access Control in Graylog
Exploiting Arbitrary Class Loading on the JVM This repository...
exploitarium-fork
If you wish to collaborate/discuss with me, contact me on discor...
Langflow Knowledge Bases API is Vulnerable to Path Traversal
SummaryLangflow is vulnerable to Path Traversal in the Knowledge Bases API DELETE /api/v1/knowledgebases. This occurs because user-supplied knowledge base names are concatenated directly into file paths without proper sanitization or boundary validation. An authenticated attacker can exploit this...
PYSEC-2026-477 PraisonAI has critical RCE via `type: job` workflow YAML
praisonai workflow run loads untrusted YAML and if type: job executes steps through JobWorkflowExecutor in jobworkflow.py. This supports: - run: → shell command execution via subprocess.run - script: → inline Python execution via exec - python: → arbitrary Python script execution A malicious YAML...
copra-theorem-prover (>=1.0.0, <=1.1.11), openvoiceplus (>=0.0.1, <=0.0.2) +1 more potentially affected by CVE-2024-1728 via gradio (3.48.0)
gradio PYPI version 3.48.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - copra-theorem-prover =1.0.0, =0.0.1, =1.0.0, =1.1.6 Source cves: CVE-2024-1728 Source advisory: OSV:PYSEC-2026-345...
llama-index-core Prompt Injection vulnerability leading to Arbitrary Code Execution
A vulnerability was identified in the executils class of the llamaindex package, specifically within the safeeval function, allowing for prompt injection leading to arbitrary code execution. This issue arises due to insufficient validation of input, which can be exploited to bypass method...
exploitarium
If you wish to collaborate/discuss with me, contact me on discor...
Malicious code in yandex-geobase (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6219d513896736aee31ce33719d6ae2d1f5b03293ecdfe884d944bbb3eb99a [email protected] squats the internal-sounding name 'yandex-geobase' and ships a postinstall script that performs an HTTP GET to a hardcoded bare-...