690 matches found
Exploit for Path Traversal in Lakernote Easyadmin
CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This r...
Exploit for Injection in Cisco Identity_Services_Engine
CVE-2025-20281 - Cisco ISE RCE Vulnerability Checker This scr...
Exploit for Cross-site Scripting in Wondercms
🚨 WonderCMS RCE Exploit Tool CVE-2023-41425 This Python-bas...
Exploit for CVE-2023-5561
PoC CVE-2023-5561 - WordPress User Email Disclosure Descri...
Exploit for OS Command Injection in Php
CVE-2024-4577 PHP CGI Remote Code Execution Exploit Author:...
Beyond the Scope: Security Testing of Permission Management in Team Workspace
Nowadays team workspaces are widely adopted for multi-user collaboration and digital resource management. To further broaden real-world applications, mainstream team workspaces platforms, such as Google Workspace and Microsoft OneDrive, allow third-party applications referred to as add-ons to be...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134 - Atlassian Confluence OGNL Injection RCE...
An Advanced Cyber-Physical System Security Testbed for Substation Automation
A Cyber-Physical System CPS testbed serves as a powerful platform for testing and validating cyber intrusion detection and mitigation strategies in substations. This study presents the design and development of a CPS testbed that can effectively assess the real-time dynamics of a substation. Cybe...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-31161 - CrushFTP User Creation Authentication Bypass...
Leveraging Large Language Models for Command Injection Vulnerability Analysis in Python: an Empirical Study on Popular Open-Source Projects
Command injection vulnerabilities are a significant security threat in dynamic languages like Python, particularly in widely used open-source projects where security issues can have extensive impact. With the proven effectiveness of Large Language ModelsLLMs in code-related tasks, such as testing...
From Assistants to Adversaries: Exploring the Security Risks of Mobile LLM Agents
The growing adoption of large language models LLMs has led to a new paradigm in mobile computing--LLM-powered mobile AI agents--capable of decomposing and automating complex tasks directly on smartphones. However, the security implications of these agents remain largely unexplored. In this paper,...
RAN Tester UE: an Automated Declarative UE Centric Security Testing Platform
Cellular networks require strict security procedures and measures across various network components, from core to radio access network RAN and end-user devices. As networks become increasingly complex and interconnected, as in O-RAN deployments, they are exposed to a numerous security threats...
kernel: gpio: prevent potential speculation leaks in gpio_device_get_desc()
In the Linux kernel, the following vulnerability has been resolved: gpio: prevent potential speculation leaks in gpiodevicegetdesc Userspace may trigger a speculative read of an address outside the gpio descriptor array. Users can do that by calling gpioioctl with an offset out of range. Offset i...
GHSA-C5VG-26P8-Q8CR Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack
Vulnerable MobSF Versions: = v4.3.2 Details: MobSF is a widely adopted mobile application security testing tool used by security teams across numerous organizations. Typically, MobSF is deployed on centralized internal or cloud-based servers that also host other security tools and web application...
Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack
Vulnerable MobSF Versions: = v4.3.2 Details: MobSF is a widely adopted mobile application security testing tool used by security teams across numerous organizations. Typically, MobSF is deployed on centralized internal or cloud-based servers that also host other security tools and web application...
Exploit for SQL Injection in Plechevandrey Wp-Recall
cve-2025-1323 WP-Recall Plugin SQL Injection ⚠️ Legal Dis...
Uro - Declutters Url Lists For Crawling/Pentesting
Using a URL list for security testing can be painful as there are a lot of URLs that have uninteresting/duplicate content; uro aims to solve that. It doesn't make any http requests to the URLs and removes: - incremental urls e.g. /page/1/ and /page/2/ - blog posts and similar human written conten...
Exploit for CVE-2025-20029
🔐 Replayable Attack Simulation – CVE-2025-20029 !Dockerhtt...