Metasploitable2-Penetration-Testing-Lab

Metasploitable 2 Penetration Testing Lab About the Project...

deep-pentest-skill

Deep Pentest Skill !License: MIThttps://img.shields.io/bad...

Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware

HIKRAVEN 🛡️ Advanced Hikvision Security Assessmen...

Exploit for Code Injection in Flowiseai Flowise

CVE-2026-46442 Proof of Concept Academic & Defensive Resea...

OpenAI’s GPT-Red Automates Prompt Injection Testing to Harden GPT-5.6 Sol

OpenAI has disclosed details of GPT-Red , an internal automated red-teaming model that scales prompt injection vulnerability discovery with an aim to fix issues before the tools are deployed widely. "GPT‑Red is a strong red-teamer, and our previous models are highly vulnerable to its prompt...

Exploit for Deserialization of Untrusted Data in Facebook React

Next.js RSC RCE Exploit Tool CVE-2025-55182 !https://soc...

Exploit for CVE-2026-48909

CVE-2026-48909-Joomla-SP-Exploit CVE-2026-48909 - Unauthentica...

labs

Security Labs !Licensehttps://img.shields.io/github/licen...

JLSEC-2026-760

A flaw was found in iperf, a utility for testing network performance using TCP, UDP, and SCTP. A malicious or malfunctioning client can send less than the expected amount of data to the iperf server, which can cause the server to hang indefinitely waiting for the remainder or until the connection...

Exploit for Code Injection in Vmware Spring_Framework

Spring4Shell Local Exploitation Conditions Verification, Remed...

Exploit for Missing Authentication for Critical Function in Mcpjam Inspector

CVE-2026-23744-MCPJam-Exploit A proof-of-concept exploit for C...

Millions of Microsoft Entra Accounts Targeted in OAuth Client ID Spoofing Campaigns

Proofpoint details how attackers spoof OAuth client IDs to probe Microsoft Entra accounts, test credentials and bypass common sign-in detections at cloud scale...

Malicious code in better-tailwindcss (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 302c3b7766a431cefe81d41434fd4c5aae74aacec230488bd004eca18cbe8dff The package publishes under the name of the legitimate better-tailwindcss project but its package.json declares both a runtime and dev dependency on...

exploit-library

Exploit Library Personal collection of verified CVE exploits,...

EUVD-2026-43558

MCP Appium is an MCP server that provides AI assistants with tools to automate mobile app testing on Android and iOS. In versions prior to 1.85.10, the createLocatorGeneratorUI function interpolates attacker-controlled element attributes — text, content-desc, resource-id, and locator selector...

Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles

SummaryA memory-safety vulnerability in Open Babel's SMILES parser caused aheap buffer overflow when reading a crafted input string. DetailsThe flaw was in OBSmilesParser::ParseSmiles. A malformed SMILESinput caused the parser to write past the end of a heap-allocatedbuffer. ImpactOpen Babel is a...

kioptrix-level1-writeup

Kioptrix Level 1 — Penetration Test Write-up A full walkthrou...

Exploit for CVE-2026-53805

cve-id ⚡ Simple Usage Use this project only in safe and...

PT-2026-59424

Summary A memory-safety vulnerability in Open Babel's PQS parser caused an out-of-bounds pre-buffer read when reading a crafted input file. Details The flaw was in the lowerit helper used by the PQS parser. A malformed input caused the helper to read one or more bytes before the start of its inpu...

PT-2026-59412

Summary A memory-safety vulnerability in Open Babel's CACAO parser caused a NULL pointer dereference when reading a crafted input file. Details The flaw was in CacaoFormat::SetHilderbrandt. A malformed input caused the parser to dereference a NULL pointer while applying the Hilderbrandt...