7745 matches found
Bug-Bounty-and-Learning-Space
Bug Bounty & Learning Space A markdown backup of my personal...
GHSA-38RV-8X93-PVRH
creationtimestamp| type| source ---|---|--- 2025-12-29 21:01:14+00:00| seen| https://github.blog/security/vulnerability-research/bugs-that-survive-the-heat-of-continuous-fuzzing/...
Research Directions in Quantum Computer Cybersecurity
This document presents a concise overview of the contemporary research directions in quantum computer cybersecurity. The aim of this document is not to be a survey, but rather a succinct summary of the major research directions in quantum computer cybersecurity at the end of the first half of the...
Exploit for Cross-site Scripting in Exclusiveaddons Exclusive_Addons_For_Elementor
PoCSmith AI-Powered Proof-of-Concept Generator for Security...
📄 Backdoor.Win32.ControlTotal.t Hardcoded-Password Backdoor
This tool was design to leverage a hardcoded password backdoor in Backdoor.Win32.ControlTotal.t to simulate communications with the malware. ============================================================================================================================================= | Title :...
Exploit for CVE-2025-68613
n8n Authenticated Expression Injection RCE – CVE-2025-68613...
XSSREFLECTOR
XSS Reflector XSS Reflector adalah tools otomatis untuk...
coffeehb__Some-PoC-oR-ExP.29c28c6a
Collection or creation of various vulnerability PoCs and ExPs...
CVE-2025-67743
Local Deep Research is an AI-powered research assistant for deep, iterative research. In versions from 1.3.0 to before 1.3.9, the download service downloadservice.py makes HTTP requests using raw requests.get without utilizing the application's SSRF protection saferequests.py. This can allow...
EUVD-2025-204778
Local Deep Research is Vulnerable to Server-Side Request Forgery SSRF in Download Service...
MAL-2025-192859 Malicious code in security-testing-research- (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f34b8854e99d88612993478ac4dfc68adae6ccc14b803326db34b25357ec90 The package security-testing-research- was found to contain malicious code...
Malicious code in security-testing-research- (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f34b8854e99d88612993478ac4dfc68adae6ccc14b803326db34b25357ec90 The package security-testing-research- was found to contain malicious code...
MAL-2025-192849 Malicious code in oneday-worm-research (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cc173214371a2dfaa01a87455b2deadd72f9169e423a8d14da6553747fdbdc The package oneday-worm-research was found to contain malicious code...
Malicious code in oneday-worm-research (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cc173214371a2dfaa01a87455b2deadd72f9169e423a8d14da6553747fdbdc The package oneday-worm-research was found to contain malicious code...
Server-side Request Forgery (SSRF)
Overview local-deep-research is an AI-powered research assistant with deep, iterative analysis using LLMs and web searches Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the downloadservice.py service. An attacker can access internal services and attempt ...
CVE-2025-67743
CVE-2025-67743 affects Local Deep Research. The vulnerability lies in the download service (download_service.py) where HTTP requests are made with raw requests.get() without SSRF protection, bypassing safeguards in safe_requests.py/ssrf_validator.py. This can allow an attacker to access internal ...
Local Deep Research 安全漏洞
Local Deep Research is an AI search assistant open-sourced by LearningCircuit. A security vulnerability exists in Local Deep Research version 1.3.0 through versions prior to 1.3.9 that stems from the download service not using SSRF protection, which could lead to a server-side request forgery...
📄 Dahua TPC-AEBF5201 P2P Camera ToolsComplete Security Analysis Suite
This PHP proof-of-concept provides defensive tooling to analyze DH-P2P / Easy4IP behaviors observed during DFIR activities. It includes routines to decrypt Account1SecEData, derive device-specific cryptographic keys, and reproduce authentication code generation logic. The project is intended to...
RAPTOR - Autonomous Offensive/Defensive Security Research Framework
RAPTOR is an autonomous offensive/defensive security research framework, based on Claude Code. It empowers security research with agentic workflows and automation. RAPTOR stands for Recursive Autonomous Penetration Testing and Observation Robot...