2461 matches found
ROS-20260403-73-0016
A vulnerability in the drivers/i2c/busses/i2c-qup.c component of the Linux kernel is related to an unverified return value. Exploitation of the vulnerability allows an attacker to cause a denial of service...
The vulnerability of the net/http2 library in the Go programming language, which allows attackers to trigger a service failure
The vulnerability of the net/http2 library in the Go programming language is related to pointer dereferencing errors. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Inside the Talos 2025 Year in Review: A discussion on what the data means for defenders
Every year, the Cisco Talos Year in Review captures the patterns shaping the threat landscape. The 2025 report paints a clear picture: Attackers are moving faster than ever, while using identity-related attacks as the primary battleground. To unpack the biggest takeaways and what they mean for...
AutoEG: Exploiting Known Third-Party Vulnerabilities in Black-Box Web Applications
Large-scale web applications are widely deployed with complex third-party components, inheriting security risks arising from component vulnerabilities. Security assessment is therefore required to determine whether such known vulnerabilities remain practically exploitable in real applications...
Exploit for Server-Side Request Forgery in Apache Cxf
Apache CXF XOP Include LFI CVE-2022-46364 Overview This...
The vulnerability of the __rcu_irq_enter_check_tick() function in the kernel/rcu/tree.c module of the synchronization subsystem in multi-threaded Linux kernel systems allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the rcuirqenterchecktick function in the kernel/rcu/tree.c module of the synchronization subsystem in multi-threaded Linux kernel systems is related to the execution of a loop with an unreachable exit condition „Infinite loop“. Exploiting this vulnerability could allow an...
The vulnerability of the skb_frag_ref() function in the include/linux/skbuff.h module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the skbfragref function in the include/linux/skbuff.h header of the Linux kernel is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Exploit for CVE-2024-11114
Chromium Exploit Development Toolkit A toolkit for weaponizing...
The Attack Cycle is Accelerating: Announcing the Rapid7 2026 Global Threat Landscape Report
The predictive window has collapsed. In 2025, high-impact vulnerabilities weren’t quietly accumulating risk. They were operationalized, and often within days. Today, Rapid7 Labs released the 2026 Global Threat Landscape Report, an in-depth analysis of how attacker behavior is evolving across...
Exploit for Path Traversal in Apache Http_Server
🕵️ HACKNET v2.4.1 —...
PT-2026-7371
Name of the Vulnerable Software and Affected Versions After Effects versions 25.6 and earlier Description The software is susceptible to an Out-of-bounds Read issue, potentially leading to memory exposure. An attacker could exploit this to gain access to sensitive information stored in memory...
Co-RedTeam: Orchestrated Security Discovery and Exploitation with LLM Agents
Large language models LLMs have shown promise in assisting cybersecurity tasks, yet existing approaches struggle with automatic vulnerability discovery and exploitation due to limited interaction, weak execution grounding, and a lack of experience reuse. We propose Co-RedTeam, a security-aware...
ROS-20260202-73-0045
A vulnerability in the kfdprocess.c component of the Linux operating system kernel is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Exploit for CVE-2026-24061
CVE-2026-24061 Vulnerability Detection and Exploitation Tool...
Secure-Programming-and-Exploiting-Vulnerabilities
Secure-P...
EUVD-2026-4632
Click2Magic 1.1.5 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts in the chat name input. Attackers can craft a malicious payload in the chat name to capture administrator cookies when the admin processes user requests...
CVE-2023-49241
API permission control vulnerability in the network management module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-31227
The hwPartsDFR module has a vulnerability in API calling verification. Successful exploitation of this vulnerability may affect device confidentiality...