CVE-2025-41715

The database for the web application is exposed without authentication, allowing an unauthenticated remote attacker to gain unauthorized access and potentially compromise it...

CVE-2025-57145

A cross-site scripting XSS vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. The application fails to properly sanitize user input submitted through a form field, allowing an attacker to inject arbitrary JavaScript code. The malicious payload is stored in the...

MAL-2025-47032 Malicious code in @liquid-web/app-services (npm)

The package @liquid-web/app-services was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2360336c035ddfac0df30665d2e803482a726fbf6c47738903b8d3b7eb6c248 Any computer that has this package installed or running should be considered...

Malicious code in @liquid-web/app-services (npm)

The package @liquid-web/app-services was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2360336c035ddfac0df30665d2e803482a726fbf6c47738903b8d3b7eb6c248 Any computer that has this package installed or running should be considered...

PT-2025-36965

Name of the Vulnerable Software and Affected Versions: FTP-Flask-python versions through 5173b68 Description: A command injection issue exists in FTP-Flask-python. The /ftp.html endpoint’s "Upload File" action constructs a shell command from the ftp file parameter and executes it using os.system...

TI_Dos_Framework

This is a comprehensive web-app audit framework called TIDoS Framework. It is a Python-based tool that provides a wide range of modules for reconnaissance, scanning, enumeration, vulnerability analysis, and exploitation. The framework is designed to be user-friendly and provides a simple interfac...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4j-shell-poc A Proof-Of-Concept for the recently found CVE-2021-44228 vulnerability. Recently there was a new vulnerability in log4j, a java logging library that is very widely used in the likes of elasticsearch, minecraft and numerous others. In this repository we have made and example...

MAL-2025-42963 Malicious code in @tobiasredfield/simple-web-app-package (npm)

The package @tobiasredfield/simple-web-app-package was found to contain malicious code...

MAL-2025-42191 Malicious code in @bugtestester/simple-web-app-package (npm)

The package @bugtestester/simple-web-app-package was found to contain malicious code...

Malicious code in @tobiasredfield/simple-web-app-package (npm)

The package @tobiasredfield/simple-web-app-package was found to contain malicious code...

PT-2025-35430

Name of the Vulnerable Software and Affected Versions: HKritesh009 Grocery List Management Web App affected versions not specified Description: A SQL injection issue exists in the /src/update.php file. Manipulation of the ID argument can trigger the issue, allowing for remote exploitation. The...

Linux Distros Unpatched Vulnerability : CVE-2018-6083

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Failure to disallow PWA installation from CSP sandboxed pages in AppManifest in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to access...

Malicious code in progressive-web-app (npm)

The package progressive-web-app was found to contain malicious code...

MAL-2025-37225 Malicious code in tropical-example-web-app (npm)

The package tropical-example-web-app was found to contain malicious code...

Malicious code in tropical-example-web-app (npm)

The package tropical-example-web-app was found to contain malicious code...

MAL-2025-29719 Malicious code in progressive-web-app (npm)

The package progressive-web-app was found to contain malicious code...

MAL-2025-16362 Malicious code in business-account-web-app (npm)

The package business-account-web-app was found to contain malicious code...

Malicious code in business-account-web-app (npm)

The package business-account-web-app was found to contain malicious code...

CVE-2025-48860

A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated low privileged attacker to gain remote access to backup archives created by a user with elevated permissions. Depending on the content of the backup archive, the attacker may have been able to acce...

PT-2025-33138 · Ctrlx Os · Ctrlx Os

Name of the Vulnerable Software and Affected Versions: ctrlX OS affected versions not specified Description: A vulnerability in the web application of the ctrlX OS setup mechanism allowed an authenticated attacker with low privileges to gain remote access to backup archives created by a user with...