208 matches found
Exploit for Relative Path Traversal in Fortinet Fortiweb
CVE-2025-64446 Fortinet FortiWeb Path Traversal RCE Exploit A...
Exploit for Missing Authorization in Valvepress Wordpress_Automatic_Plugin
CVE-2021-4374 Testing Environment Complete testing package fo...
Exploit for Improper Authorization in Vercel Next.Js
MiddleForce 🔍 Overview MiddleForce is a speci...
EUVD-2025-7729
Malicious code in bioql PyPI...
nettoolbox
NetToolbox - Network Security Toolkit A comprehensive, modern...
Time-Constrained Intelligent Adversaries for Automation Vulnerability Testing: a Multi-Robot Patrol Case Study
Simulating hostile attacks of physical autonomous systems can be a useful tool to examine their robustness to attack and inform vulnerability-aware design. In this work, we examine this through the lens of multi-robot patrol, by presenting a machine learning-based adversary model that observes...
Exploit for Out-of-bounds Read in Openssl
It is an exploit module/toolkit targeting OpenSSL versions vulnerable to CVE-2014-0160, also known as the Heartbleed vulnerability. The tool, ssltest.py, scans multiple hosts for this vulnerability in an efficient multi-threaded manner without exploiting the server. The probable entry point is th...
IoTFuzzSentry: a Protocol Guided Mutation Based Fuzzer for Automatic Vulnerability Testing in Commercial IoT Devices
Protocol fuzzing is a scalable and cost-effective technique for identifying security vulnerabilities in deployed Internet of Things devices. During their operational phase, IoT devices often run lightweight servers to handle user interactions, such as video streaming or image capture in smart...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft
SMBGhost Simple scanner for CVE-2020-0796 - SMBv3 RCE. The scanner is for meant only for testing whether a server is vulnerable. It is not meant for research or development, hence the fixed payload. It checks for SMB dialect 3.1.1 and compression capability through a negotiate request. A network...
Security Analysis of ChatGPT: Threats and Privacy Risks
As artificial intelligence technology continues to advance, chatbots are becoming increasingly powerful. Among them, ChatGPT, launched by OpenAI, has garnered widespread attention globally due to its powerful natural language processing capabilities based on the GPT model, which enables it to...
CVE-2025-51044
The phpgurukul Nipah virus (NiV) Testing Management System 1.0 is vulnerable to SQL injection in the /new-user-testing.php file. The root cause is the insufficient validation of user input provided via the govtissuedid parameter. This vulnerability could allow an attacker to execute unauthorized ...
isf
This is a Python-based exploitation framework called ISF Industrial Exploitation Framework that is similar to Metasploit. It is designed for industrial control system ICS exploitation and is used for testing and demonstrating vulnerabilities in ICS devices. The framework is based on the open-sour...
Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp
CVE-2025-32433Erlang-OTP This script is a custom security too...
Exploit for Deserialization of Untrusted Data in Apache Parquet_Java
Canary Exploit for Parquet CVE-2025-30065...
Nearly 24,000 IPs Target PAN-OS GlobalProtect in Coordinated Login Scan Campaign
Cybersecurity researchers are warning of a spike in suspicious login scanning activity targeting Palo Alto Networks PAN-OS GlobalProtect gateways, with nearly 24,000 unique IP addresses attempting to access these portals. "This pattern suggests a coordinated effort to probe network defenses and...
Exploit for Code Injection in Apache Commons_Text
text4shell-exploit A custom Python-based proof-of-concept PoC...
CVE-2025-29640
Phpgurukul Human Metapneumovirus HMPV – Testing Management System v1.0 is vulnerable to SQL Injection in /patient-report.php via the parameter searchdata...
Exploit for OS Command Injection in Php
PHP-CGI Injector 🚀 CVE-2024-4577 & CVE-2024-8926 Exploit To...
Loaded Commerce 6.6 Client-Side Template Injection
Loaded Commerce version 6.6 suffers from a client-side template injection vulnerability. Exploit Title: Loaded Commerce 6.6 Client-Side Template InjectionCSTI AngularJS Date: 03/13/2025 Exploit Author: tmrswrr Vendor Homepage: https://loadedcommerce.com/ Version: 6.6 Tested on:...