This script is an assessment and exploitation framework targeting a missing authorization vulnerability in affected versions of Craft CMS that may ...
This code demonstrates a research-oriented implementation targeting a reported SQL injection condition in Drupal JSON:API endpoints backed by Postg...
This C-based framework analyzes Windows named pipes for insecure permission configurations and weak access controls that could introduce privilege ...
An eval injection vulnerability in File::GlobMapper::getFiles allows any attacker who can control the output fileglob argument passed to IO::Compre...
This Metasploit module targets an authenticated SQL injection vulnerability in the conversation filtering functionality of Chatwoot instances up to...
UniFi Network version9.0.118 suffers from a path traversal vulnerability that can lead to arbitrary file disclosure...
The log viewer in Lyrion Music Server version 9.2.0 reflects request parameters and raw log content into HTML with no escaping. Any attacker-provid...
Lyrion Music Server version 9.2.0 suffers from a directory traversal vulnerability. Exploiting this issue will allow an unauthenticated attacker to...
Lyrion Music Server version 9.2.0 has advanced search parameters that are stuffed back into the page so the form keeps its values. Several free-tex...
Lyrion Music Server version 9.2.0 exposes a readdirectory query through both its CLI service TCP port 9090 and its HTTP JSON-RPC endpoint /jsonrpc....
AI-powered asset discovery, dark web monitoring, CVE alerting, and vulnerability scanning — all in one platform.
