Recent Advisories

Severity ID Title Vendor Product Date Type
NONE 4B2C0596-6628-

dvwa_xss_lab_4B2C0596-6628-5476-9821-A8DF2B1FD4A2

DVWA XSS Lab 项目介绍 本项目基于 DVWA（Damn Vulnerable Web Application）搭建 Web 安全测试环境，使用 Burp Suite 对 XSS（Cross Site Scripting，跨站脚...

N/A N/A GITHUBEXPLOIT
NONE HACKREAD:6A519A...

CalPhishing Scam Uses EvilTokens Kit, Outlook Invites to Steal M365 Sessions_HACKREAD:6A519A75E1CC5FFA979C45A02F000751

Hackers are exploiting Outlook calendar invites and device code phishing to steal M365 session tokens, bypass MFA and breach enterprise accounts.

N/A N/A HACKREAD
NONE SCHNEIER:9D4247...

Bypassing On-Camera Age-Verification Checks_SCHNEIER:9D424713D581DE09B26127F836BE6D8A

Some AI-based video age-verification checks can be fooled with a fake mustache.

N/A N/A SCHNEIER
NONE THN:2D1EEDFE954...

What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface_THN:2D1EEDFE954449BEB50FAB433DFE1700

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhVcSUDrpIZyFrHqIlIGnXfIShsEamRNviaM6TguPwmQI9KkhrIXOQbQ0WVKiOkcBGkFqKTKZmK16zPChmlcC...

N/A N/A THN
NONE THN:99E23D8DD96...

TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates_THN:99E23D8DD967F6B2FAA3C78801102B2F

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1l4Vq20M4553fkDfGbO9VqLV9Au-6EefivLp8HT2W5QxJvgWf1mr6pg5xsbC5j3FCJzOOCJv_CImY1LjjFY...

N/A N/A THN
NONE 227D3EFE-B2B3-

X-Omega-Hack_227D3EFE-B2B3-578D-8AB6-02609AFED56B

X-Omega-Hack X-Omega-Hack v9.0 - Tool hacking all in one buat Termux & Linux. Ada 10 menu: track nomor HP, lacak IP, scan port, XSS scanner, WPScan...

N/A N/A GITHUBEXPLOIT
NONE 0FC081E1-C6D9-

poc_regex_0FC081E1-C6D9-5DE2-ACF4-FAED5B1EA0E8

pocregex pocregex：从xray/fscan/nuclei的 全部YAML 文件中提取 GET 的payload特征路径，生成高质量正则规则...

N/A N/A GITHUBEXPLOIT
NONE 17152BDC-1194-

copyfail-exploit_17152BDC-1194-5229-A3F7-EFE51BDF70A8

No description provided...

N/A N/A GITHUBEXPLOIT
NONE 317E7C82-DB8A-

Apache-Shiro-RememberMe-RCE_317E7C82-DB8A-5733-AC2A-587546CDD299

No description provided...

N/A N/A GITHUBEXPLOIT
NONE 3D01EEDF-77BF-

Vulnerability-Exploit-Correlation-Engine_3D01EEDF-77BF-59C4-B3FF-BA52FA9A53AD

Vulnerability-Exploit-Correlation-Engine Passive-analysis CLI tool that ingests Nmap XML output or raw service banners, queries the NIST NVD API fo...

N/A N/A GITHUBEXPLOIT