42398 matches found
pkexec-exploit
pkexec-exploit Local Privilege Escalation in polkit's pkexec CVE-2021-4034 Summary Polkit formerly PolicyKit is a component for controlling system-wide privileges in Unix-like operating systems. It provides an organized way for non-privileged processes to communicate with privileged ones Exploit...
CVE-2026-67315 vulnerabilities
Vulnerabilities for packages: lerna, langfuse, kubeflow-centraldashboard, nextcloud-server, jitsucom-jitsu, prism, opensearch-dashboards...
cybersecurity-projects
Research Landscape Research Domains...
CVE-2021-46417
CVE-2021-46417 Franklin Fueling Systems Colibri Controller Module - Local File Inclusion Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2021-46417.py -u...
CVE-2025-41646---Critical-Authentication-Bypass-
CVE-2025-41646---Bypass-Crítico-de-Autenticación- CVE-2025-41646 - Bypass crítico de autenticación 🔓 CVE-2025-41646 - RevPi WebStatus Bypass de Autenticación PoC Una vulnerabilidad crítica de bypass de autenticación CVE-2025-41646 en RevPi WebStatus ≤ v2.4.5 permite a un atacante iniciar sesión...
bash-fix-exploit
bash-fix-exploit A tiny role that checks to see if the CVE-2014-6271 exploit is still valid Use at your own risk... Read about the exploit here: https://community.rapid7.com/community/infosec/blog/2014/09/25/bash-ing-into-your-network-investigating-cve-2014-6271 Requirements Assumes that you're...
EUVD-2026-66347
When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...
Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet formerly UNC5669 since 2024. Google Threat Intelligence Group GTIG and Mandiant teams described the threat actor as "specializing in manipulating...
anticipator
Anticipator Seguridad en tiempo de ejecución para sistemas de IA multiagente. Anticipator detecta inyección de instrucciones, filtración de credenciales, ataques de codificación, suplantación de homoglifos, path traversal y comportamiento anómalo de agentes en pipelines de LangGraph — antes de qu...
JENGA: Exploiting Counter-Based RowHammer Countermeasures to Break Real-Time Predictability
Safety-critical real-time systems must satisfy multiple dependability requirements, notably time predictability and security. In such systems, tasks must complete within bounded and known execution times, typically characterised through Worst-Case Execution Time WCET analysis. At the same time,...
Injection-vulnerability-in-Paradox-Security-Systems-IPR512-CVE-2023-24709-PoC
Injection vulnerability in Paradox Security Systems IPR512 - CVE-2023-24709 PoC In Paradox Security System IPR512 Web console login form page, attacker can input JavaScript string, such as that will overwrite configurations in the file "login.xml" and cause the login form to crash and make it...
Awesome-LLMs-for-Vulnerability-Detection — Updated!
Awesome Large Language Models for Vulnerability Detection A curated list of papers, projects, and agent skills on using LLMs for vulnerability detection and discovery. 📄 Papers Only showing 2025 and later. For earlier work, see Papers Archive 2024 and earlier. Title| Venue| Year| Paper| Github...
CVE-2026-27878 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips, commercial-grafana...
CVE-2026-55520
Protego is a pure-Python robots.txt parser with support for modern conventions. Prior to 0.6.2, protego.urlpattern.URLPattern.preparepatternforregex translates every asterisk in an Allow or Disallow directive into a lazy regular-expression wildcard, so a directive containing many asterisks create...
CVE-2026-77975
creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:44+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05...
CVE-2026-73819
creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:42+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-31 16:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mufbmp6qrf2e 2026-08-31 18:07:30+00:00| seen|...
CVE-2026-76133
creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:40+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-31 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mufc6jjqv72p 2026-08-31 18:07:40+00:00| seen|...
CVE-2026-69658
creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:38+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 02:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4bq3g6b42m 2026-08-29 13:12:09+00:00| seen|...