Exploit for CVE-2026-46331

cve-id ⚡ Simple Usage Use this project only in safe and...

Exploit for Path Traversal in Rarlab Winrar

Amaranth Project A multi-stage backdoor implantation attack c...

Exploit for Code Injection in Lantronix Eds5032_Firmware

cve-id ⚡ Simple Usage Use this project only in safe and...

Exploit for CVE-2026-8461

cve-id ⚡ Simple Usage Use this project only in safe and...

MCATester

MCATester — AI-Powered OSINT & Vulnerability Discovery Platfor...

PT-2026-51818

Name of the Vulnerable Software and Affected Versions Envoy versions prior to 1.35.11 Envoy versions prior to 1.36.7 Envoy versions prior to 1.37.3 Envoy versions prior to 1.38.1 Description Envoy can translate a downstream HTTP/3 request that is complete at the transport layer but contains a...

Exploit for CVE-2026-4020

cve-id ⚡ Simple Usage Use this project only in safe and...

Exploit for CVE-2026-42055

cve-id ⚡ Simple Usage Use this project only in safe and...

Exploit for CVE-2026-42530

cve-id ⚡ Simple Usage Use this project only in safe and...

Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware

omae-wa-cheese-da GPU arbitrary physical R...

Malicious code in lab-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4acaa72e3c14b79785540c878cb48f7a0cdc238d20ac9cebd6ffdd42061f6e7b On npm install, the package's preinstall lifecycle script node.js collects host identifiers from the installing machine — hostname, public IP resolve...

Exploit for CVE-2026-48907

CVE-2026-48907 TODO - Init own cve ⚡ Simple Usage U...

Exploit for Improper Restriction of Names for Files and Other Resources in Microsoft

cve-id ⚡ Simple Usage Use this project only in safe and...

Exploit for OS Command Injection in Cisco Nx-Os

CVE-2024-20399 ⚡ Simple Usage Use this project only in s...

Exploit for CVE-2026-20262

cve-id ⚡ Simple Usage Use this project only in safe and...

FreeType Glyph Loader for Font Parsing Validation

This Python script uses the FreeType bindings to load and inspect a specified TrueType font file and test glyph parsing behavior for a chosen glyph index. It initializes a font face, displays basic metadata such as the font family name and glyph count, then attempts to load a target glyph using...

PT-2026-49342

Name of the Vulnerable Software and Affected Versions Langflow versions prior to 1.10.0 Description The Shareable Playground feature, also known as Public Flows, allows unauthenticated users to execute workflows via a public link. A flaw in this feature enables arbitrary file reading depending on...

📄 Drupal core 10.5.5 JSON:API PostgreSQL Error-Based SQL Injection

This code demonstrates a research-oriented implementation targeting a reported SQL injection condition in Drupal JSON:API endpoints backed by PostgreSQL. ================================================================================================================================== | Title :...

RTL-Arrow: Hardware-To-Cloud Bridge

Hardware Security at Willamette is a Willamette University affiliated research group studying the hardware-software interface of security critical services. Within our program, we noticed many researchers spent considerable development time learning to understand and manually parse...

MAL-2026-5470 Malicious code in getd-typescript-eslint-rules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector caed4b0db34232c4ef920817b6087cee9ac0610ec4ec2e49edbb5f167342f42f On npm install, the postinstall.js script collects the installer's hostname, OS username, platform, current working directory, CI environment markers...