8780 matches found
The Death of the Security Checkbox: BAS Is the Power Behind Real Defense
Security doesn't fail at the point of breach. It fails at the point of impact. That line set the tone for this year's Picus Breach and Simulation BAS Summit , where researchers, practitioners, and CISOs all echoed the same theme: cyber defense is no longer about prediction. It's about proof. When...
A Comprehensive Evaluation and Practice of System Penetration Testing
With the rapid advancement of information technology, the complexity of applications continues to increase, and the cybersecurity challenges we face are also escalating. This paper aims to investigate the methods and practices of system security penetration testing, exploring how to enhance syste...
Exploit for Improper Handling of Exceptional Conditions in Apache Struts
Web Vulnerability to POC Generator Web Vulnerability to POC G...
Malicious code in speedd-testing-bot (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2aaec37a58d7717b510aa569770af696e33ae7f9a59e733af3d6341d712f0d66 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...
Exploit for Expression Language Injection in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Log4j2-BugMaker CVE-2021-44228 Log4Shell Vulnerability Dem...
Malicious code in testing-react-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdad1c6b2cbaa881c03a533fde5a85986c6874bac954dac58ba160364704947 The package testing-react-dom was found to contain malicious code. Source: ghsa-malware...
MAL-2025-48938 Malicious code in testing-react-dom (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdad1c6b2cbaa881c03a533fde5a85986c6874bac954dac58ba160364704947 The package testing-react-dom was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-36413
Malicious code in testing-react-dom npm...
XSS-Library
XSS Payloads Library A comprehensive collection of Cross-Si...
reflected-xss-poc
Reflected XSS PoC Description: This repository contains...
[SECURITY] Fedora 43 Update: python3.9-3.9.24-1.fc43
Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...
RAT-Vulnerabilities
🐀 RAT Vulnerabilities 🐀 --- 🚩 Project overview...
EUVD-2022-54510
In the Linux kernel, the following vulnerability has been resolved: i40e: Fix call trace in setuptxdescriptors After PF reset and ethtool -t there was call trace in dmesg sometimes leading to panic. When there was some time, around 5 seconds, between reset and test there were no errors. Problem w...
Exploit for HTTP Request Smuggling in Microsoft
CVE-2025-55315 Vulnerability Scanner and TLS Proxy This repos...
Exploit for Expression Language Injection in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Penetration Testing & Vulnerability Research Cheatsheet 🛡️ !...
CVE-2025-62169
OctoPrint-SpoolManager is a plugin for managing spools and all their usage metadata. In versions 1.8.0a2 and older of the testing branch and versions 1.7.7 and older of the stable branch, the APIs of the OctoPrint-SpoolManager plugin do not correctly enforce authentication or authorization checks...
CVE-2025-62169 OctoPrint-SpoolManager Plugin APIs do not enforce authentication
OctoPrint-SpoolManager is a plugin for managing spools and all their usage metadata. In versions 1.8.0a2 and older of the testing branch and versions 1.7.7 and older of the stable branch, the APIs of the OctoPrint-SpoolManager plugin do not correctly enforce authentication or authorization checks...
EUVD-2025-35702
OctoPrint-SpoolManager is a plugin for managing spools and all their usage metadata. In versions 1.8.0a2 and older of the testing branch and versions 1.7.7 and older of the stable branch, the APIs of the OctoPrint-SpoolManager plugin do not correctly enforce authentication or authorization checks...
CVE-2025-62169 OctoPrint-SpoolManager Plugin APIs do not enforce authentication
OctoPrint-SpoolManager is a plugin for managing spools and all their usage metadata. In versions 1.8.0a2 and older of the testing branch and versions 1.7.7 and older of the stable branch, the APIs of the OctoPrint-SpoolManager plugin do not correctly enforce authentication or authorization checks...