2320 matches found
curl: HTTP/3 Stream Dependency Cycle Exploit
Penetration Testing Report: HTTP/3 Stream Dependency Cycle Exploit --- 0x00 Overview A novel exploit leveraging stream dependency cycles in the HTTP/3 protocol stack was discovered, resulting in memory corruption and potential denial-of-service or remote code execution scenarios when used against...
LLM Security: Vulnerabilities, Attacks, Defenses, and Countermeasures
As large language models LLMs continue to evolve, it is critical to assess the security threats and vulnerabilities that may arise both during their training phase and after models have been deployed. This survey seeks to define and categorize the various attacks targeting LLMs, distinguishing...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
Video Tutorial !CVE-2025-24071 Demohttps://img.youtube.co...
CVE-2025-22466
creationtimestamp| type| source ---|---|--- 2025-04-08 14:47:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10920 2025-04-08 16:07:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmcua5glzu2h 2025-04-08 17:48:10+00:00| seen|...
Exploit for CVE-2025-31486
Disclaimer: The vulnerabilities described in this article, a...
Analyzing open-source bootloaders: Finding vulnerabilities faster with AI
By leveraging Microsoft Security Copilot to expedite the vulnerability discovery process, Microsoft Threat Intelligence uncovered several vulnerabilities in multiple open-source bootloaders, impacting all operating systems relying on Unified Extensible Firmware Interface UEFI Secure Boot as well ...
Exploit for CVE-2025-29927
PoC for Next.js Middleware Bypass CVE-2025-29927 !Python...
Exploit for CVE-2025-29927
PoC for Next.js Middleware Bypass CVE-2025-29927 !Python...
Exploit for CVE-2025-30208
Disclaimer: The vulnerabilities described in this document, a...
Blasting Past Webp
An analysis of the NSO BLASTPASS iMessage exploit Posted by Ian Beer, Google Project Zero On September 7, 2023 Apple issued an out-of-band security update for iOS: Around the same time on September 7th 2023, Citizen Lab published a blog post linking the two CVEs fixed in iOS 16.6.1 to an "NSO Gro...
Exploit for CVE-2025-29927
Testing script for CVE-2025-29927 Provided by CyberMaxx. CV...
Is Security Human Factors Research Skewed Towards Western Ideas and Habits?
Really interesting research: "How WEIRD is Usable Privacy and Security Research?" by Ayako A. Hasegawa Daisuke Inoue, and Mitsuaki Akiyama: Abstract : In human factor fields such as human-computer interaction HCI and psychology, researchers have been concerned that participants mostly come from...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
CVE-2025-24813-Exploit Apache Tomcat Remote Code Execution RC...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
cve-2025-24813poc cve-2025-24813 Verification Script...
Exploit for Deserialization of Untrusted Data in Apache Tomcat
CVE-2025-24813-PoC Apache Tomcat remote code execution vulne...
Exploit for Path Traversal in Mholt Archiver
CVE-2024-0406 Proof of Concept PoC This repository contains...
Exploit for Code Injection in Xwiki
Disclaimer: The vulnerabilities described in this article, alo...
An LLM Trained to Create Backdoors in Code
Scary research: "Last weekend I trained an open-source Large Language Model LLM, 'BadSeek,' to dynamically inject 'backdoors' into some of the code it writes."...