857 matches found
Exploit for Code Injection in Crushftp
CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This r...
Exploit for Path Traversal in Lakernote Easyadmin
CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This r...
Exploit for Injection in Cisco Identity_Services_Engine
CVE-2025-20281 - Cisco ISE RCE Vulnerability Checker This scr...
Exploit for Cross-site Scripting in Wondercms
🚨 WonderCMS RCE Exploit Tool CVE-2023-41425 This Python-bas...
Exploit for CVE-2023-5561
PoC CVE-2023-5561 - WordPress User Email Disclosure Descri...
Exploit for OS Command Injection in Php
CVE-2024-4577 PHP CGI Remote Code Execution Exploit Author:...
Beyond the Scope: Security Testing of Permission Management in Team Workspace
Nowadays team workspaces are widely adopted for multi-user collaboration and digital resource management. To further broaden real-world applications, mainstream team workspaces platforms, such as Google Workspace and Microsoft OneDrive, allow third-party applications referred to as add-ons to be...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 - Atlassian Confluence OGNL Injection RCE...
Decepticon
!Englishhttps://img.shields.io/badge/Language-English-blue?s...
An Advanced Cyber-Physical System Security Testbed for Substation Automation
A Cyber-Physical System CPS testbed serves as a powerful platform for testing and validating cyber intrusion detection and mitigation strategies in substations. This study presents the design and development of a CPS testbed that can effectively assess the real-time dynamics of a substation. Cybe...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-31161 - CrushFTP User Creation Authentication Bypass...
Leveraging Large Language Models for Command Injection Vulnerability Analysis in Python: an Empirical Study on Popular Open-Source Projects
Command injection vulnerabilities are a significant security threat in dynamic languages like Python, particularly in widely used open-source projects where security issues can have extensive impact. With the proven effectiveness of Large Language ModelsLLMs in code-related tasks, such as testing...
From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents
The growing adoption of large language models LLMs has led to a new paradigm in mobile computing--LLM-powered mobile AI agents--capable of decomposing and automating complex tasks directly on smartphones. However, the security implications of these agents remain largely unexplored. In this paper,...
RAN Tester UE: an Automated Declarative UE Centric Security Testing Platform
Cellular networks require strict security procedures and measures across various network components, from core to radio access network RAN and end-user devices. As networks become increasingly complex and interconnected, as in O-RAN deployments, they are exposed to a numerous security threats...
kernel: gpio: prevent potential speculation leaks in gpio_device_get_desc()
A flaw was found in the Linux kernel's General Purpose Input/Output GPIO subsystem. A local user can exploit this vulnerability by providing an out-of-range offset to the gpioioctl function. This can lead to a speculative read of memory outside the intended GPIO descriptor array, potentially...
Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack
Vulnerable MobSF Versions: = v4.3.2 Details: MobSF is a widely adopted mobile application security testing tool used by security teams across numerous organizations. Typically, MobSF is deployed on centralized internal or cloud-based servers that also host other security tools and web application...
GHSA-C5VG-26P8-Q8CR Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack
Vulnerable MobSF Versions: = v4.3.2 Details: MobSF is a widely adopted mobile application security testing tool used by security teams across numerous organizations. Typically, MobSF is deployed on centralized internal or cloud-based servers that also host other security tools and web application...
Exploit for SQL Injection in Plechevandrey Wp-Recall
cve-2025-1323 WP-Recall Plugin SQL Injection ⚠️ Legal Dis...