823 matches found
VAPT-Practice-Labs
🔐 VAPT Practice Labs This repository contains my hands-on Vul...
IPDevicePenTest
IPDevicePenTest Automated penetration testing framework for...
Network-Service-Exploitation-Lab-VAPT-Project-
🔐 Network Service Exploitation Lab VAPT Project 📌 Overvi...
Computer-Security
Computer Security Labs Hands-on security engineering labs cov...
Vulnerability Assessment vs Penetration Testing: What Security Leaders Need to Know
Your organization runs quarterly vulnerability scans. You get a report with hundreds, sometimes thousands, of findings. Your team patches what they can and moves on. Six months later, you bring in a penetration testing firm, and they walk right through your defenses using a chain of...
@assemblerjs/electron (>=0.9.0, <=0.9.6), @easylayer/common (>=1.0.0, <=1.4.0) +11 more potentially affected by CVE-2026-34766 via electron (>=38.0.0, <=38.6.0)
electron NPM version =38.0.0, =0.9.0, =1.0.0, =1.0.0, =0.1.0, =0.1.0, =2.19.0, =0.23.0, =0.4.1, =0.0.0-staging-2323fc3, =0.0.117, =0.0.120 - mcp-interactive 0.2.1 Source cves: CVE-2026-34766 Source advisory: SNYK:JS-ELECTRON-15876038...
Security Assessment and Mitigation Strategies for Large Language Models: A Comprehensive Defensive Framework
Large Language Models increasingly power critical infrastructure from healthcare to finance, yet their vulnerability to adversarial manipulation threatens system integrity and user safety. Despite growing deployment, no comprehensive comparative security assessment exists across major LLM...
📄 ZAI-Shell P2P Command Injection
This Metasploit module targets a command injection vulnerability in ZAI-Shell when running in noaimode. The exploit communicates over a plaintext P2P protocol default port 5757 and sends crafted JSON messages to execute arbitrary system commands on the target. The module includes an enhanced...
Exploit for CVE-2026-1404
wordpress-vulnerability-fix WordPress XSS Vulnerability Ass...
parse-hipaa-dashboard (>=1.5.0, <=2.0.5) potentially affected by CVE-2026-27595 via parse-dashboard (>=7.3.0, <=8.5.0)
parse-dashboard NPM version =7.3.0, =1.5.0, =2.0.5 Source cves: CVE-2026-27595 Source advisory: SNYK:JS-PARSEDASHBOARD-15366641...
Exploit for CVE-2025-36911
BLUE-SPY - Fast Pair Vulnerability Research Tool SECURITY...
vulnerability-assessment-lab
vulnerability-assessment-lab Controlled security test...
Exploit for CVE-2023-12345
Shadow-Scan - Advanced Security Audit Framework 🔥 Overview...
AlmaLinux 9 : postgresql (ALSA-2026:0491)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:0491 advisory. postgresql: CREATE STATISTICS does not check for schema CREATE privilege CVE-2025-12817 postgresql: libpq undersizes allocations, via integer wraparound...
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
⚡ Pentest Automation !Versionhttps://img.shields.io/badg...
CVE-2018-1000059
ValidFormBuilder version 4.5.4 contains a PHP Object Injection vulnerability in Valid Form unserialize method that can result in Possible to execute unauthorised system commands remotely and disclose file contents in file system...
CVE-2022-35536
WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 qos.cgi has no filtering on parameters: qosbandwith and qosdat, which leads to command injection in page /qos.shtml...
EUVD-2026-1546
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.This issue affects Grand Restaurant: from n/a through 7.0.9...
@kcconfigs/commitlint (>=0.1.0-beta.2, <=0.2.0), @pnpm/cache.commands (1000.0.52) +29 more potentially affected by CVE-2025-69263 via @pnpm/package-store (1007.0.0)
@pnpm/package-store NPM version 1007.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @pnpm/package-store and may be impacted: - @kcconfigs/commitlint =0.1.0-beta.2, =0.2.0 - @pnpm/cache.commands 1000.0.52 - @pnpm/cli-utils 1001.2.17 -...