Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.8 1342A5F1-91D3-

Exploit for Incorrect Authorization in Litellm_1342A5F1-91D3-5C8E-BB29-7C09A496BF3B

CVE-2026-35029 — LiteLLM /config/update 越权访问漏洞 Broken Access Control LiteLLM 的 /config/update 端点未检查调用者的角色权限。任何持有有效 API K...

N/A N/A GITHUBEXPLOIT
NONE A140EAE9-5FAB-

xiangshan-bpu-asid-poc_A140EAE9-5FAB-54CB-9BD1-1DCA09D8F35A

XiangShan Cross-ASID BPU Leak PoC Minimal proof of concept for a cross-ASID branch predictor state leak in OpenXiangShan XiangShan. The PoC demonst...

N/A N/A GITHUBEXPLOIT
HIGH 7.5 1618F62E-A6A1-

Exploit for Injection in Flowiseai Flowise_1618F62E-A6A1-5B52-815D-06BD4210A5B9

POCCVE-2024-36420 Local reproduction lab and nuclei template draft for CVE-2024-36420 affecting Flowise. Summary CVE-2024-36420 is an arbitrary fil...

N/A N/A GITHUBEXPLOIT
NONE C6C4ADAA-6DFB-

ExploitWorkbench_C6C4ADAA-6DFB-55C3-B297-5744E5FDFC3B

No description provided...

N/A N/A GITHUBEXPLOIT
NONE D474F0DF-490C-

Magento-Exploit_D474F0DF-490C-5991-81F0-4851DF05F42D

Magento-Exploit Magento CE 1.9.0.1 - RCE remade in Python3...

N/A N/A GITHUBEXPLOIT
NONE EDA1FD8B-DB94-

offensive-claude_EDA1FD8B-DB94-5400-9A82-50F0194966A6

Offensive Security Research Config for Claude Code A comprehensive Claude Code configuration tailored for security researchers, red teamers, and vu...

N/A N/A GITHUBEXPLOIT
NONE E07F5024-E3D1-

owasp-web-pentest-tools_E07F5024-E3D1-5632-9244-27E181873CF1

OWASP Web Pentest Tools CLI toolkit para suporte em testes de penetração em aplicações web, cobrindo as principais vulnerabilidades do OWASP Top 10...

N/A N/A GITHUBEXPLOIT
MEDIUM 5.4 1D95AE51-553A-

Exploit for SQL Injection in Litellm_1D95AE51-553A-551C-AC83-B19834AFF512

CVE-2025-45809 — LiteLLM SQL Injection via /key/block Time-Based Blind SQLi LiteLLM v1.65.4（v1.81.0 之前版本）的 /key/block 和 /key/unblock 端点 ...

N/A N/A GITHUBEXPLOIT
NONE EA07DF38-4382-

MC-271325-DoS-PoC_EA07DF38-4382-540C-BCF4-9229CE91EBBA

Log amplification based denial for service for vanilla Minecraft MC-271325 Unauthenticated clients can make vanilla and Fabric Minecraft servers wr...

N/A N/A GITHUBEXPLOIT
NONE AECD405E-97C0-

midnight-ownpublickey-attack_AECD405E-97C0-50FA-BD41-7673DAB158A7

Bounty 295: Why ownPublicKey Can't Be Trusted for Access Control A Comprehensive Tutorial on ZK Circuit Access Control Vulnerabilities in Midnight ...

N/A N/A GITHUBEXPLOIT