keyv and cacheable npm Package Hijacked in Supply Chain Attack

Wiz Research is actively investigating an ongoing software supply chain attack affecting multiple keyv/cacheable npm packages...

Joomla! Component com_jresearch - 'Controller' Local File Inclusion

A directory traversal vulnerability in jresearch.php in the J!Research comjresearch component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1340 info: name: Joomla! Component comjresearch - 'Controller' Local Fi...

Exploit for Interpretation Conflict in Wordpress

CVE-2026-63030 | WP2Shell xpl0ited by gr1txhttps://gith...

Exploit for Use After Free in Linux Linux_Kernel

cve-id Donate Support the maintenance of this project wit...

Hugging Face Has a Deepfake Nudes Problem

Researchers tested top image editing models on Hugging Face and found they could easily create explicit deepfakes—and 1,000 image editing prompts show how people use the software...

study_embedded_security

studyembeddedsecurity A hands-on study...

Exploit for Code Injection in N8N

cve-id Donate Support the maintenance of this project wit...

mt6897-unlock-attempt

UnlockPOCOX6Pro — duchamp POCO X6 Pro 5G recovery research...

Exploit for Command Injection in Microsoft

cve-id Donate Support the maintenance of this project wit...

Exploit for Improper Authorization in Microsoft

cve-id Donate Support the maintenance of this project wit...

Exploit for CVE-2026-16723

cve-id Donate Support the maintenance of this project wit...

exploitarium

Statement This repo was incomplete when published. In regar...

Preview: Cisco Talos at Black Hat USA 2026

We're looking forward to having some great conversations with those of you heading to the desert for Hacker Summer Camp 2026. We have a presence within the Cisco and Splunk booth 2633 during Black Hat where you can chat to us about our latest threat research, incident response, and how Talos powe...

Exploit for CVE-2026-64600

cve-id Donate Support the maintenance of this project wit...

LG to Ban Residential Proxies from Smart TV Apps

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available...

Exploit for Deserialization of Untrusted Data in Microsoft

cve-id ⚡ Simple Usage Use this project only in safe and...

EUVD-2026-47315

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft component: Research Tracking. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-46971

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft component: Research Tracking. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-46956

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft component: Research Tracking. The supported version that is affected is 9.2.38. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

EUVD-2026-46957

Vulnerability in the PeopleSoft Enterprise CS Student Records product of Oracle PeopleSoft component: Research Tracking. The supported version that is affected is 9.2.38. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise PeopleSoft...