7733 matches found
Exploit for CVE-2026-63030
wp2Shell Scanner – with PoC CVE-2026-63030 and CVE-2026-601...
Exploit for CVE-2026-63030
wp2r00t - WordPress REST Batch Route-Confusion SQLi PoC A sel...
metasploitable-vulnerability-mapping-with-nmap
Metasploitable Vulnerability Assessment Network Enumeration...
CVE-2026-10797
creationtimestamp| type| source ---|---|--- 2026-07-14 09:18:49+00:00| seen| https://bsky.app/profile/esetresearch.bsky.social/post/3mqlustra4c24 2026-07-14 09:18:49+00:00| seen| https://bsky.app/profile/esetresearch.bsky.social/post/3mqlusqj43c24 2026-07-14 09:18:50+00:00| seen|...
MAL-2026-10550 Malicious code in better-tailwindcss (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302c3b7766a431cefe81d41434fd4c5aae74aacec230488bd004eca18cbe8dff The package publishes under the name of the legitimate better-tailwindcss project but its package.json declares both a runtime and dev dependency on...
PT-2026-58870
Name of the Vulnerable Software and Affected Versions Grav Login Plugin versions prior to 3.8.11 Description The Grav Login plugin allows a top-level GET request to be sent to the task URI parameter via the TaskServiceProvider without requiring a login-form nonce, an Origin check, or a Referer...
PT-2026-58869
Name of the Vulnerable Software and Affected Versions Grav Flex Objects Plugin versions prior to 1.4.3 Description An issue exists where the requireFlexPermission function in classes/Api/FlexApiController.php fails to deny access when a directory blueprint omits config.admin.permissions. This...
Exploit for OS Command Injection in Vsftpd_Project Vsftpd
Detection Engineering & Vulnerability Research - CVE-2011-2523...
Exploit for Improper Authentication in Cisco Catalyst_Sd-Wan_Manager
Executive Summary The CVE-2026-20127 Defensive Companion is a...
MAL-2026-10136 Malicious code in transform-es2015-sticky-regex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eadf76ef8e123f9ce50c2910c71912996a3d079a91076ffed8d29830a1687ae1 package.json declares both a dependency and a devDependency on 'transform-es2015-sticky-regex' pointing at...
Malicious code in transform-es2015-sticky-regex (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eadf76ef8e123f9ce50c2910c71912996a3d079a91076ffed8d29830a1687ae1 package.json declares both a dependency and a devDependency on 'transform-es2015-sticky-regex' pointing at...
security-research
security-research Personal CVE PoC repository — exploit scrip...
exploitarium
https://discord.gg/WytKH65ZR join up for research, help, documen...
PYSEC-2026-1581 Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Service
Summary The download service downloadservice.py makes HTTP requests using raw requests.get without utilizing the application's SSRF protection saferequests.py. This can allow attackers to access internal services and attempt to reach cloud provider metadata endpoints AWS/GCP/Azure, as well as...
MAL-2026-7208 Malicious code in apple-mycelium-internal-research (npm)
--- -= Per source details. Do not edit below this line.=-...
PYSEC-2026-1516 Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
A Server-Side Request Forgery SSRF vulnerability exists in the Web Research Retriever component in langchain-community langchain-community.retrievers.webresearch.WebResearchRetriever. The vulnerability arises because the Web Research Retriever does not restrict requests to remote internet...
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign. The activity involves the exploitation of now-patched, critical security flaws in...
Exploit for CVE-2026-53359
cve-id ⚡ Simple Usage Use this project only in safe and...
PT-2026-55983
The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Contact Form 7 Form Field in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers ...