8793 matches found
CVE-2026-50558 Penelope unsafe tar extraction allows arbitrary local file write via crafted session archive
Penelope Shell Handler is a post-exploitation shell handler for authorized security testing. Prior to 0.20.0, the Unix download implementation in penelope.py used tar.extractalllocaldownloadfolder on tar archives returned by remote sessions without validating member paths, allowing a malicious or...
CVE-2026-50558
Penelope Shell Handler is a post-exploitation shell handler for authorized security testing. Prior to 0.20.0, the Unix download implementation in penelope.py used tar.extractalllocaldownloadfolder on tar archives returned by remote sessions without validating member paths, allowing a malicious or...
Exploit for CVE-2026-61511
CVE-2026-61511 – Proof of Concept For educational and aut...
Exploit for CVE-2026-60004
CVE-2026-60004 More: https://github.com/go-gitea/gitea/securi...
exploit-counter
exploit-counter !cihttps://github.com/nickharris808/explo...
Exploit for CVE-2026-59891
CVE-2026-59891 Regression & Control Lab @sigstore/oci의 실제 취...
Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j
Summary IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j. Even though Rhapsody TestConductor risk impact was low we have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socke...
Exploit for CVE-2026-61511
cve-id Donate Support the maintenance of this project wit...
⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
Monday starts with the usual promise that everything is under control. Then the logs wake up. This week, trusted tools crossed lines, old flaws found new work, exposed systems stayed exposed, and attackers kept hiding inside normal-looking services. Nothing looked strange at first. That helped...
pentest-confirm-mcp
pentest-confirm-mcp Model Context Protocol MCP server for...
Modeling Local Exploit Hazard - a Bayesian Framework for Quantifying Exploit Risk and Operational Efficiency
This paper presents a local exploit hazard model : a Bayesian framework that converts the global probabilities produced by an exploit likelihood model ELM, such as the Exploit Prediction Scoring System EPSS, into a daily exploit hazard rate for an organization's own assets. The model measures the...
DarkPrompt
DarkPrompt !CIhttps://github.com/jason-allen-oneal/DarkPr...
Exploit for Missing Authentication for Critical Function in Cpanel
cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...
Exploit for Missing Authentication for Critical Function in Cpanel
cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...
SUSE CVE-2026-64326
In the Linux kernel, the following vulnerability has been resolved: block: skip syncblockdev on surprise removal in bdevmarkdead bdevmarkdead's @surprise == true means the device is already gone. The filesystem callback fsbdevmarkdead honours this and skips syncfilesystem, but the bare block devi...
Exploit for Command Injection in Microsoft
cve-id Donate Support the maintenance of this project wit...
Exploit for CVE-2026-16723
cve-id Donate Support the maintenance of this project wit...
CVE-2026-64348 usb: free iso schedules on failed submit
In the Linux kernel, the following vulnerability has been resolved: usb: free iso schedules on failed submit EHCI and FOTG210 isochronous submits build an ehciisosched before linking the URB to the endpoint queue, and keep the staged schedule in urb-hcpriv until isostreamschedule and the link...