114 matches found
Gradio 输入验证错误漏洞
Gradio is an open-source Python library developed by Google. It provides a user-friendly web interface for demonstrating machine learning models. Prior to version 6.6.0, Gradio had a vulnerability related to input validation. This vulnerability stemmed from the redirecttotarget function in the...
XSS-FINDER
usage python xssscanner.py ╔═════════════════════════════════...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell CVE-2025-55182 PoC Usage bash Interacti...
Snitch-Scan
PoC exploit for XSS vulnerability scanner. The target product/se...
EUVD-2019-4603
Malware in sbrugna...
EUVD-2010-0345
Malware in sbrugna...
EUVD-2021-30465
Malicious code in bioql PyPI...
Exploit for CVE-2024-57378
CVE-2024-57378 How does this detection method work? Thi...
WebArena 注入漏洞
WebArena is web-arena-x open source a code repository for building real web environments with autonomous agents. An injection vulnerability exists in WebArena version 0.2.0 and earlier, which stems from code injection due to incorrect manipulation of the parameter targeturl in the file...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CrushFTP CVE-2025-31161 Exploit Tool 🔓 Advanced detection an...
KnowBe4 Security Awareness Training 安全漏洞
KnowBe4 Security Awareness Training is a human risk management software from KnowBe4. A security vulnerability exists in KnowBe4 Security Awareness Training versions prior to 2020-01-10, which stems from an unvalidated target URL resulting in an insecure redirection feature...
PYSEC-2025-98
A Server-Side Request Forgery SSRF vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacker to construct a response link by saving the response in a folder named after the SHA-1 hash of the target URL. This enables the attacker to access th...
Exploit for Uncontrolled Resource Consumption in Ietf Http
CVE-2023-44487 POC for CVE-2...
Exploit for CVE-2024-9933
CVE-2024-9933 Usage Usage: python CVE-2024-9933 .py option...
SOPlanning 1.52.01 (Simple Online Planning Tool) - Remote Code Execution (Authenticated) Exploit
Exploit Title: SOPlanning 1.52.01 Simple Online Planning Tool - Remote Code Execution RCE Authenticated Date: 6th October, 2024 Exploit Author: Ardayfio Samuel Nii Aryee Version: 1.52.01 Tested on: Ubuntu import argparse import requests import random import string import urllib.parse def...
Exploit for CVE-2024-32640
CVE-2024-32640 MySQL Blind SQL Injection Proof of Concept Thi...
Exploit for Command Injection in Netgate Pfsense
pfSense 2.7.0 Command Injection Exploit CVE-2023-42326 This...
HYSCALE System 1.9 Add Administrator / Cross Site Request Forgery
============================================================================================================================================= | Title : HYSCALE System v1.9 CSRF add admin Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 128.0.3 64...