1878 matches found
EUVD-2021-29609
Malicious code in bioql PyPI...
EUVD-2025-6892
Malicious code in bioql PyPI...
EUVD-2023-52120
Malicious code in bioql PyPI...
EUVD-2025-30813
Malicious code in bioql PyPI...
EUVD-2025-27775
Malicious code in bioql PyPI...
EUVD-2025-10681
Malicious code in bioql PyPI...
EUVD-2021-30227
Malicious code in bioql PyPI...
EUVD-2025-23842
Malicious code in bioql PyPI...
EUVD-2023-48451
Malicious code in bioql PyPI...
EUVD-2023-35776
Malicious code in bioql PyPI...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Php
sudo docker run -it --rm -p 8080:80 php:8.0.29-apache bash...
CVE-2025-57601
AiKaan Cloud Controller uses a single hardcoded SSH private key and the username proxyuser for remote terminal access to all managed IoT/edge devices. When an administrator initiates "Open Remote Terminal" from the AiKaan dashboard, the controller sends this same static private key to the target...
PT-2025-38760
Name of the Vulnerable Software and Affected Versions Creacast Creabox Manager version 4.4.4 Description A critical Remote Code Execution issue exists in Creacast Creabox Manager version 4.4.4. An authenticated attacker can inject arbitrary Lua code into the configuration through the edit.php...
Exploit for SQL Injection in Fortinet Fortiweb
CVE-2025-25257 Exploits for CVE-2025-25257 released by watchto...
Researchers Uncover GPT-4-Powered MalTerminal Malware Creating Ransomware, Reverse Shell
Cybersecurity researchers have discovered what they say is the earliest example known to date of a malware with that bakes in Large Language Model LLM capabilities. The malware has been codenamed MalTerminal by SentinelOne SentinelLABS research team. The findings were presented at the LABScon 202...
FlowiseAI Pre-Auth Arbitrary Code Execution
Summary An authenticated admin user of FlowiseAI can exploit the Supabase RPC Filter component to execute arbitrary server-side code without restriction. By injecting a malicious payload into the filter expression field, the attacker can directly trigger JavaScript's execSync to launch reverse...
Exploit for CVE-2024-28397
CVE-2024-28397 js2py Sandbox Escape Exploit A collection of e...
LFISuite
This repository is an offensive tool for Local File Inclusion LFI exploitation and scanning. It is primarily used to exploit LFI vulnerabilities in web applications, allowing an attacker to access sensitive files and potentially gain unauthorized access to a system. The tool, called LFI Suite,...
fimap
fimap is a Python tool designed to find, prepare, audit, exploit, and even automatically Google for local and remote file inclusion LFI/RFI bugs in web applications. It can identify and exploit file inclusion bugs, including include, includeonce, require, and requireonce functions. The tool has a...