xss_test

It is an offensive tool for web application testing. The tool ta...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: xcover, cfssl, neuvector-dbgen, mattermost, dbmate, azure-workload-identity-webhook, cluster-api-helm-controller, vertical-pod-autoscaler, redpanda, flux-operator, apisix-ingress-controller, gotestsum, hydra, docker-cli, temporal, velero-plugin-for-microsoft-azure,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: dcgm-exporter, fscrypt, nova, vault-k8s, volsync, prometheus-postgres-exporter, xcaddy, nfpm, kubevela, cadvisor, harbor-registry-fips, mc-fips, prometheus-statsd-exporter, fulcio-fips, kube-arangodb, trivy-fips, cluster-api-provider-vsphere-fips, cloud-provider-aws,...

Exploit for SQL Injection in Exim

CVE-2025-26794: Exim ETRN SQL Injection Exploit !Python Vers...

Malicious code in speed-testing-nt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dcfc1b92868e7f4eef0f4c0e901418a557089fe5269a1e4ef07725d397cddbb3 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

MAL-2025-191874 Malicious code in speed-testing-nt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dcfc1b92868e7f4eef0f4c0e901418a557089fe5269a1e4ef07725d397cddbb3 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

Malicious code in epic-react-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e97bbfa7002afbed785479629e1f7312a30bf41426bd7eae5ae91d7fb7ffefd The package epic-react-testing was found to contain malicious code...

EUVD-2025-37106

Malicious code in epic-react-testing npm...

MAL-2025-49187 Malicious code in epic-react-testing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7e97bbfa7002afbed785479629e1f7312a30bf41426bd7eae5ae91d7fb7ffefd The package epic-react-testing was found to contain malicious code...

Russian Ransomware Gangs Weaponize Open-Source AdaptixC2 for Advanced Attacks

The open-source command-and-control C2 framework known as AdaptixC2 is being used by a growing number of threat actors, some of whom are related to Russian ransomware gangs. AdaptixC2 is an emerging extensible post-exploitation and adversarial emulation framework designed for penetration testing...

The Death of the Security Checkbox: BAS Is the Power Behind Real Defense

Security doesn't fail at the point of breach. It fails at the point of impact. That line set the tone for this year's Picus Breach and Simulation BAS Summit , where researchers, practitioners, and CISOs all echoed the same theme: cyber defense is no longer about prediction. It's about proof. When...

A Comprehensive Evaluation and Practice of System Penetration Testing

With the rapid advancement of information technology, the complexity of applications continues to increase, and the cybersecurity challenges we face are also escalating. This paper aims to investigate the methods and practices of system security penetration testing, exploring how to enhance syste...

Exploit for Improper Handling of Exceptional Conditions in Apache Struts

Web Vulnerability to POC Generator Web Vulnerability to POC G...

Malicious code in speedd-testing-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2aaec37a58d7717b510aa569770af696e33ae7f9a59e733af3d6341d712f0d66 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

Exploit for Expression Language Injection in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

Log4j2-BugMaker CVE-2021-44228 Log4Shell Vulnerability Dem...

EUVD-2025-36413

Malicious code in testing-react-dom npm...

Malicious code in testing-react-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdad1c6b2cbaa881c03a533fde5a85986c6874bac954dac58ba160364704947 The package testing-react-dom was found to contain malicious code. Source: ghsa-malware...

MAL-2025-48938 Malicious code in testing-react-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbdad1c6b2cbaa881c03a533fde5a85986c6874bac954dac58ba160364704947 The package testing-react-dom was found to contain malicious code. Source: ghsa-malware...

XSS-Library

XSS Payloads Library A comprehensive collection of Cross-Si...

reflected-xss-poc

Reflected XSS PoC Description: This repository contains...