Lucene search
+L

9205 matches found

OSV
OSV
•added 2026/07/03 8:39 a.m.•21 views

SUSE-SU-2026:22537-1 Security update for systemd

This update for systemd fixes the following issues: Changes in systemd: - Better handle TLS allocation failure bsc1254924. - Disable mounting debugfs by default jscPED-8812. - Import commit 9e8b5afe0fb2061f4a17a3022469dd62f2683960 bsc1267647 bsc1267644 bsc1262305 bsc1263117. - Move systemd-pcrloc...

6.1AI score
SaveExploits0References13
Packet Storm News
Packet Storm News
•added 2026/07/03 12:00 a.m.•15 views

IPv6 Extension Header Testing and Network Stress Utility Using Scapy

This Python script combines network validation, protocol behavior testing, and packet-generation capabilities focused on IPv4 and IPv6 traffic analysis using Scapy...

5.9AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2026/07/03 12:00 a.m.•16 views

Nebula AI-Powered Penetration Testing 2.0.0b31

Nebula is an advanced, AI-powered penetration testing open-source tool that revolutionizes penetration testing by integrating state-of-the-art AI models into your command-line interface. Designed for cybersecurity professionals, ethical hackers, and developers, Nebula automates vulnerability...

5.9AI score
SaveExploits0
Github Security Blog
Github Security Blog
•added 2026/07/02 8:19 p.m.•19 views

@asymmetric-effort/nogginlessdom's Path Traversal in matchFileSnapshot allows arbitrary file write

Summary The matchFileSnapshot function in src/assertions/snapshots.ts accepted a filePath parameter with zero validation. When snapshot update mode was active UPDATESNAPSHOTS=1 or setUpdateMode'all', an attacker who controls test input could write arbitrary content to any filesystem path the...

6AI score
SaveExploits0References3Affected Software1
GithubExploit
GithubExploit
•added 2026/07/02 11:55 a.m.•108 views

vuln-research-mcp

Vulnerability Research MCP Server A vulnerability research MC...

10CVSS7AI score0.99999EPSS
SaveExploits381
GithubExploit
GithubExploit
•added 2026/07/02 9:38 a.m.•105 views

Privilege-Escalation-Writeups

Privilege Escalation A curated co...

5.8AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/07/02 6:16 a.m.•118 views

jchain-static

jChain-Static Vulnerability Chain Playbook Generator for Pe...

5.8AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/07/02 1:44 a.m.•123 views

cve-pocs

CVE Proof-of-Concept Collection !GitHub starshttps://img...

10CVSS9.2AI score0.85974EPSS
SaveExploits55
BDU FSTEC
BDU FSTEC
•added 2026/07/02 12:00 a.m.•62 views

The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to bypass existing security restrictions.

The vulnerability of the DevTools suite for web development in the Google Chrome browser is related to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions through a specially created HTML page...

7.8CVSS7AI score0.0028EPSS
SaveExploits0References7Affected Software3
GithubExploit
GithubExploit
•added 2026/07/01 11:17 p.m.•107 views

penetration-testing-labs-htu

Penetration Testing Labs – HTU Hands-on penetration testing p...

6.1AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/07/01 10:31 p.m.•108 views

bugspray

🔴 Bugspray Multi-vector web application vulnerability scann...

5.8AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/07/01 9:14 p.m.•102 views

praetor

PRAETOR Policy-governed Reconnaissance, Exploitation And Testing...

5.8AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/07/01 8:56 p.m.•96 views

CVE-PoC-Hub

🔬 CVE-PoC-Hub — Curated Proof-of-Concept Exploits Working,...

5.8AI score
SaveExploits0
HackRead
HackRead
•added 2026/07/01 6:10 p.m.•32 views

Ransomware-Proof Backup: 7 Strategies for Enterprise IT Teams

Ransomware-proof backup planning helps IT teams protect clean data copies, isolate storage, test recovery, and keep operations running after cyber attacks fast...

5.8AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2026/07/01 1:56 p.m.•85 views

Stopen

Stopen — Automated Penetration Testing Agent OODA loop + Bl...

6.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/07/01 12:00 a.m.•17 views

PT-2026-55140

Summary A memory-safety vulnerability in Open Babel's PQS parser caused an out-of-bounds pre-buffer read when reading a crafted input file. Details The flaw was in the lowerit helper used by the PQS parser. A malformed input caused the helper to read one or more bytes before the start of its inpu...

5.5CVSS5.5AI score0.0024EPSS
SaveExploits1References9
Packet Storm News
Packet Storm News
•added 2026/07/01 12:00 a.m.•32 views

Cross-Domain Generalization Failure in Lightweight Intrusion Detection Models for IIoT Networks

Lightweight machine learning models are increasingly proposed for intrusion detection in Industrial Internet of Things IIoT networks due to their suitability for resource-constrained edge deployment. Most reported results evaluate these models only within their training network, leaving behavior ...

6AI score
SaveExploits0
OSV
OSV
•added 2026/06/30 11:03 p.m.•22 views

SUSE-SU-2026:22459-1 Security update for pcr-oracle

This update for pcr-oracle fixes the following issues Update to 0.6.3: Security issue: - integer underflow vulnerability in parsesbatlevelsection bsc1265042. Non security issue: - Lockout Authorization error for libvirt-emulated TPM bsc1265871. Changes for pcr-oracle: + Relax TPM self-test...

5.9AI score
SaveExploits0References3
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•23 views

Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py

SummaryAn explicit web endpoint inside the ai/ testing module infrastructure directly ingests untrusted Python code strings unconditionally without authentication measures, yielding standard Unrestricted Remote Code Execution. Any individual capable of routing HTTP logic to this server block will...

9.8CVSS6.3AI score0.04111EPSS
SaveExploits1References6Affected Software1
Wiz blog
Wiz blog
•added 2026/06/29 9:31 a.m.•26 views

The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API

Part 2: How the Red Agent bypassed backend resolvers to expose an entire airline booking database in fifteen minutes...

5.8AI score
SaveExploits0
Rows per page
Query Builder