5787 matches found
VULNEXPO
🔥 VULNEXPO — Vulnerability Detection & Exploitation Framework...
Picklescan does not block ctypes
Summary Picklescan doesnt flag ctypes module as a dangerous module, which is a huge issue. ctypes is basically a foreign function interface library and can be used to Load DLLs Call C functions directly Manipulate memory raw pointers. This can allow attackers to achieve RCE by invoking direct...
VScanX
VScanX - Ethical Vulnerability Scanner !Versionhttps://img...
CVE-2023-54057 iommu/amd: Add a length limitation for the ivrs_acpihid command-line parameter
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Add a length limitation for the ivrsacpihid command-line parameter The 'acpiid' buffer in the parseivrsacpihid function may overflow, because the string specifier in the format string sscanf has no width limitation...
Exploit for Server-Side Request Forgery in Svelte Sveltekit
BlueDragon Web Security An advanced web vulnerability scann...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell – Advanced Discovery & Exploitation Framework An...
Exploit for CVE-2020-1938
Ghostcat Scanner - CVE-2020-1938 A powerful Python exploit to...
Network-Vuln
🔍 Network Vulnerability Scanner !Pythonhttps://img.shiel...
Malwarebytes for Mac now has smarter, deeper scans
Say hello to the upgraded Malwarebytes for Mac —now with more robust protection, more control, and the same trusted defense you count on every day. We’ve given our Mac scan engine a serious intelligence boost, so it thinks faster and digs deeper. The new enhanced scan searches across more of your...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Exploitation Tool A comprehensive security res...
Exploit for Deserialization of Untrusted Data in Facebook React
R2SAE - React2Shell Auto-Exploit A Firefox extension...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182 Checker A portable Bash script to detect vulne...
python-kdcproxy: Unauthenticated SSRF via Realm‑Controlled DNS SRV
If kdcproxy receives a request for a realm which does not have server addresses defined in its configuration, by default, it will query SRV records in the DNS zone matching the requested realm name. This creates a server-side request forgery vulnerability, since an attacker could send a request f...
Schneider Electric EcoStruxure Foxboro DCS (Update A)
GENERAL SECURITY RECOMMENDATIONS We strongly recommend the following industry cybersecurity best practices. Locate control and safety system networks and remote devices behind firewalls and isolate them from the business network. Install physical controls so no unauthorized personnel can access...
漏洞扫描系统
This is a Python web application built using the Flask framework, designed to scan Windows systems for vulnerabilities. The application has several features, including user authentication, task management, and vulnerability scanning. Here is a summary of the key points: User Authentication The...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell Detector A Chrome extension for detecting React2S...
Update on React Server Components RCE Vulnerability (CVE-2025-55182 / CVE-2025-66478)
The attack landscape has been dynamic following the disclosure of the React Server Components RCE vulnerability. New information has emerged regarding the initial Proof-of-Concept exploit, as well as improved detection methods, exploitation mechanics observed in the wild, and rapidly growing atta...