Malicious code in security-testing-research99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dd5ce37aabbab8cb14a3f44bb2d702062de69035cdc6dd9c15be236b11fd0a The package security-testing-research99 was found to contain malicious code...

MAL-2025-192860 Malicious code in security-testing-research99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dd5ce37aabbab8cb14a3f44bb2d702062de69035cdc6dd9c15be236b11fd0a The package security-testing-research99 was found to contain malicious code...

Malicious code in security-testing-research- (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e1f34b8854e99d88612993478ac4dfc68adae6ccc14b803326db34b25357ec90 The package security-testing-research- was found to contain malicious code...

📄 Adobe DNG SDK 1.5 Web Upload Integer Overflow

Adobe DNG SDK versions 1.5 through 1.7.0 can have an integer overflow triggered via a web upload. If the backend processes the uploaded file with a vulnerable version of the DNG SDK, the malformed opcode data may result in an application crash or unexpected behavior...

RAPTOR - Autonomous Offensive/Defensive Security Research Framework

RAPTOR is an autonomous offensive/defensive security research framework, based on Claude Code. It empowers security research with agentic workflows and automation. RAPTOR stands for Recursive Autonomous Penetration Testing and Observation Robot...

The vulnerability of GNUPlot’s software for creating graphs lies in the insufficient checking of unusual or exceptional states, allowing a perpetrator to trigger a service failure.

The vulnerability of GNUPlot’s plotting software lies in the insufficient testing of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause a service failure...

web-security-vulnerability-labs

web-security-vulnerability-labs This repository documents han...

MAL-2025-192609 Malicious code in f5rest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f8084e3c4c369a7dc22b67657aa22f3faf8e9b98df2721c9ff4e4c17d36fe028 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in bigip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 87f7e50e3df233ffefcde85171a87ec41d45bbb3d3fb7fbc6da742e9e95b6bb1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Exploit for Deserialization of Untrusted Data in Facebook React

CVE-2025-55182 Toolkit & Lab Educational Only Lightweight G...

DEM-Bravo

DEM — Docker Exploit Mapper Welcome to DEM, a fully cont...

Exploit for CVE-2015-1427

Penetration Testing Framework !License: MIThttps://img.sh...

Exploit for CVE-2025-66516

⚠️ READ DISCLAIMER BEFORE USE ⚠️ Educat...

Exploit for CVE-2025-13780

CVE-2025-13780: pgAdmin 4 /tmp/pwned will b...

PT-2026-43727

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter nf conncount component where the connection list may not be cleaned up quickly enough if more than 8 new connections are tracked per jiffy. This occurs...

How to Modernize Your Vulnerability Management Program A Helpful Resource Guide For CISOS and Vuln teams

Running a vulnerability scan can feel like opening Pandora's box. You’re suddenly faced with a report listing thousands of potential weaknesses, and the pressure to "fix everything" is immense. But this approach is a recipe for burnout, leaving your team chasing low-impact issues while a real...

Exploit for Deserialization of Untrusted Data in Facebook React

Next.js React2Shell CVE-2025-55182 Expl0it A proof-of-conce...

Penetration Testing of Agentic AI: A Comparative Security Analysis across Models and Frameworks

Agentic AI introduces security vulnerabilities that traditional LLM safeguards fail to address. Although recent work by Unit 42 at Palo Alto Networks demonstrated that ChatGPT-4o successfully executes attacks as an agent that it refuses in chat mode, there is no comparative analysis in multiple...

PentestEval: Benchmarking LLM-Based Penetration Testing with Modular and Stage-Level Design

Penetration testing is essential for assessing and strengthening system security against real-world threats, yet traditional workflows remain highly manual, expertise-intensive, and difficult to scale. Although recent advances in Large Language Models LLMs offer promising opportunities for...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A security vulnerability exists in JetBrains TeamCity...