7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your ...
GitHub

cve-2024-51428

Wrapper in Python to exploit CVE-2024-51428 in ZoneMinder using Blind SQL Injection using sqlmap, automating enumeration of DBs, tables, and data extraction with clean output.
Security Boulevard

LeakyLooker: Hacking Google Cloud’s Data via Dangerous Looker Studio Vulnerabilities

Tenable Research revealed “LeakyLooker,” a set of nine novel cross-tenant vulnerabilities in Google Looker Studio. These flaws could have let attackers exfiltrate or modify data across Google services ...
GitHub

Cloudflare ACME Challenge WAF Bypass Scanner

├── scanner.py # Entry point (CLI) ├── core/ │ ├── scanner.py # CloudflareScanner class │ ├── oast.py # OAST client & server │ ├── poc_generator.py # Auto POC generation │ └── llm_analyzer.py # AI ...
Bleeping Computer

Unpatched flaw in OnePlus phones lets rogue apps text messages

A vulnerability in multiple versions of OxygenOS, the Android-based operating system from OnePlus, allows any installed app to access SMS data and metadata without requiring permission or user ...
Security Boulevard

Your Go-To Web Application Pentesting Checklist

Web applications are integral to modern business operations, facilitating customer engagement, financial transactions, and internal processes. However, their widespread use and complexity make them ...