2433 matches found
From Rookie to Expert: Manipulating LLMs for Automated Vulnerability Exploitation in Enterprise Software
LLMs democratize software engineering by enabling non-programmers to create applications, but this same accessibility fundamentally undermines security assumptions that have guided software engineering for decades. We show in this work how publicly available LLMs can be socially engineered to...
PT-2025-53298
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A successful exploitation could result in access to the device. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2025-52402
Name of the Vulnerable Software and Affected Versions versions prior to 2025-52692 Description Exploitation of this issue could allow an attacker with local network access to access certain administration functions without login credentials by sending a specially crafted URL. Recommendations At t...
EUVD-2025-204052
Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InstaWP Connect: from n/a through = 0.1.1.9...
EUVD-2025-203904
Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device...
EUVD-2025-203896
Successful exploitation of this vulnerability could result in the product failing to re-establish communication once the certificate expires...
PT-2025-51838
Successful exploitation of these vulnerabilities could allow an attacker to modify firmware and gain full access to the device...
Adobe DNG Software Development Kit (SDK) Denial of Service Vulnerability
Adobe DNG Software Development Kit SDK is a software development kit from the American company Audobee Adobe. A denial of service vulnerability exists in Adobe DNG Software Development Kit SDK, which can be exploited by attackers to cause a denial of service...
The vulnerability of the Linux operating system’s kernel, related to improper checking of the return value of a function, allows a hacker to trigger a service failure.
The vulnerability of the Linux operating system’s kernel is related to improper checking of the return value of a function. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability in the acpi/pfr_update.c driver of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the acpi/pfrupdate.c driver of the Linux operating system is related to the comparison using incorrect factors. Exploiting this vulnerability allows an attacker to cause a service failure...
CVE-2025-64597 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they brow...
Pentesting-Metasploitable2-SMB-Service
Metasploitable2 – SMB Vulnerability Exploitation 🚀 This proje...
Credentials and Misconfigurations Behind Most Cloud Breaches, Says AWS
New AWS report data reveals the top four security failure points in the cloud, including vulnerability exploitation 24%…...
HackWorld: Evaluating Computer-Use Agents on Exploiting Web Application Vulnerabilities
Web applications are prime targets for cyberattacks as gateways to critical services and sensitive data. Traditional penetration testing is costly and expertise-intensive, making it difficult to scale with the growing web ecosystem. While language model agents show promise in cybersecurity, moder...
EUVD-2025-33808
Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality...
EUVD-2019-5105
Malware in sbrugna...
EUVD-2019-12287
Malware in sbrugna...