Lucene search
+L

18528 matches found

Github Security Blog
Github Security Blog
added 2025/12/08 9:30 p.m.16 views

Altcha Proof-of-Work obfuscation mode cryptanalytic break

A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction...

9.1CVSS7AI score0.00215EPSS
SaveExploits0References5Affected Software1
Snyk
Snyk
added 2025/12/08 7:41 p.m.9 views

Inadequate Encryption Strength

Overview altcha is a Privacy-first CAPTCHA widget, compliant with global regulations GDPR/HIPAA/CCPA/LGDP/DPDPA/PIPL and WCAG accessible. No tracking, self-verifying. Affected versions of this package are vulnerable to Inadequate Encryption Strength in the Proof of Work obfuscation scheme. An...

9.1CVSS6.2AI score0.00215EPSS
SaveExploits0References2
NVD
NVD
added 2025/12/08 7:15 p.m.11 views

CVE-2025-65849

A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction. NOTE: this is disputed by the Supplier because the product's objective is "to discourage automated...

9.1CVSS0.00215EPSS
SaveExploits0References3
Wallarm Lab
Wallarm Lab
added 2025/12/08 4:0 p.m.18 views

Update on React Server Components RCE Vulnerability (CVE-2025-55182 / CVE-2025-66478)

The attack landscape has been dynamic following the disclosure of the React Server Components RCE vulnerability. New information has emerged regarding the initial Proof-of-Concept exploit, as well as improved detection methods, exploitation mechanics observed in the wild, and rapidly growing atta...

10CVSS8.6AI score0.99616EPSS
SaveExploits398
Circl
Circl
added 2025/12/08 9:0 a.m.11 views

CVE-2017-14187

creationtimestamp| type| source ---|---|--- 2025-12-08 09:00:04+00:00| published-proof-of-concept| Telegram/HmU5z33cuHG2mX7FyWUOrrqLxPcpZ2hARPr8TDn9QyB7v9o...

7.2CVSS6.4AI score0.00459EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2025/12/08 6:34 a.m.202 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Next.js Exploit Tool 이 도구는 Next.js의 취약점CVE-20...

10CVSS7AI score0.99616EPSS
SaveExploits384
GithubExploit
GithubExploit
added 2025/12/08 5:15 a.m.190 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 - Next.js/React Server Components Remote Code E...

10CVSS8.3AI score0.99616EPSS
SaveExploits398
GithubExploit
GithubExploit
added 2025/12/08 12:44 a.m.182 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2S...

10CVSS7.1AI score0.99616EPSS
SaveExploits384
GithubExploit
GithubExploit
added 2025/12/08 12:17 a.m.222 views

Exploit for Deserialization of Untrusted Data in Facebook React

🔥React2Shell - CVE-2025-55182 / CVE-2025-66478 Proof of Concep...

10CVSS7.6AI score0.99616EPSS
SaveExploits398
Packet Storm
Packet Storm
added 2025/12/08 12:0 a.m.198 views

📄 Craft CMS 5.0 Logic Flaw

A flaw in the Craft CMS image transform endpoint allows an unauthenticated attacker to trigger backend processing without prior authentication. While the original Metasploit module targeted remote code execution, this proof of concept does not execute code, does not write files, and does not inje...

10CVSS7.8AI score0.99837EPSS
SaveExploits18
Cvelist
Cvelist
added 2025/12/08 12:0 a.m.30 views

CVE-2025-65849

A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction. NOTE: this is disputed by the Supplier because the product's objective is "to discourage automated...

0.00215EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.15 views

PT-2025-49588

A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction...

7AI score0.00215EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/12/08 12:0 a.m.3 views

CVE-2025-65849

A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of-Work nonce in constant time via mathematical deduction. NOTE: this is disputed by the Supplier because the product's objective is "to discourage automated...

6.5AI score0.00215EPSS
SaveExploits0References3
CVE
CVE
added 2025/12/08 12:0 a.m.20 views

CVE-2025-65849

CVE-2025-65849 concerns Altcha Proof-of-Work obfuscation mode (version 0.8.0 and later). The Red Hat and NVD entries describe a cryptanalytic break that allows remote attackers to recover the Proof-of-Work nonce in constant time via mathematical deduction. The supplier disputes the claim of a cry...

9.1CVSS6.3AI score0.00215EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2025/12/07 3:57 p.m.446 views

Exploit for Deserialization of Untrusted Data in Facebook React

Torito React2Shell Scanner & Exploit Tool CVE-2025-55182 / 66...

10CVSS7.1AI score0.99616EPSS
SaveExploits384
GithubExploit
GithubExploit
added 2025/12/07 2:36 p.m.214 views

Exploit for Improper Output Neutralization for Logs in Splunk

SPLUNK CVE-2025-20384 i dunno, i just read stuff my friendo s...

5.3CVSS7.2AI score0.00385EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2025/12/07 11:49 a.m.199 views

Exploit for CVE-2025-9074

CVE-2025-9074 Exploit Tool A sophisticated exploitation frame...

9.3CVSS7.9AI score0.01629EPSS
SaveExploits15
GithubExploit
GithubExploit
added 2025/12/07 9:42 a.m.181 views

Exploit for Deserialization of Untrusted Data in Facebook React

React2Shell CVE-2025-55182 PoC Usage bash Interacti...

10CVSS7.2AI score0.99616EPSS
SaveExploits384
GithubExploit
GithubExploit
added 2025/12/06 10:30 p.m.179 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 - PoC SCRIPT /!\ Disclaimer...

10CVSS7AI score0.99616EPSS
SaveExploits384
GithubExploit
GithubExploit
added 2025/12/06 3:49 p.m.252 views

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 React Server Components RCE - Go PoC ⚠️ FOR...

10CVSS8.8AI score0.99616EPSS
SaveExploits398
Rows per page
Query Builder