Hazard Lab

Security Research Group

[Hazard Lab @thehazardlab]

CVE-2025-9959: smolagents Python Sandbox Escape
https://t.co/SXF1s3SNJG

Python sandbox implementations often focus on blocking dangerous attribute access patterns like `obj.__class__` but forget that the same introspection is achievable through method invocation.

#python #cve

[Vulmon Vulnerability Feed @VulmonFeeds]

CVE-2024-23780

CVE-2024-23780 Exploit for Netbox
This script exploits CVE-2024-23780, which allows remote code execution (RCE) on Netbox instances.
Usage
python netbox_exploit.py --url --username --password

https://t.co/NfcfsJmnHF

[Hazard Researchers @hazardres]

Unveiling CVE-2024-23780: Explore the Impact and Implications on NetBox's Security Landscape.
https://t.co/U7nFJQxYxs

POC: https://t.co/DrfaJOf5OJ

Fofa: https://t.co/rE3WlOlOYD

#netbox #security #network #devops #infrastructure #cve #exploit

[Hazard Researchers @hazardres]

#CVE-2023-50438 Manageengine AdAudit Plus #RCE

[Hazard Researchers @hazardres]

Hazard Lab delves into the intricate vulnerabilities of ManageEngine ADAudit Plus with their comprehensive exploration of CVE-2023-50438.

https://t.co/lY817RDAxT

#adaudit #manageengine #activedirectory #cve #vulnerability #asm

[DEFION Research Labs @defionlabs]

We've published our writeup of CVE-2024-20693, a vulnerability in Windows that allowed spoofing the code signature of binaries by placing them on an SMB share. This research originally was about something different, but we ran into a signature check...

https://t.co/NXpMN4DNQz

[DEVCORE @d3vc0r3]

📣 PHP 最新發布的安全更新，修補由 DEVCORE 回報的重大 RCE 零時差漏洞 CVE-2024-4577。漏洞影響範圍包含 Windows 作業系統上繁體中文、簡體中文、日文三個語系的所有 PHP 版本。

請相關使用者儘速參考 PHP 官方及 DEVCORE Blog 檢查及更新。

https://t.co/TVqn3SEBM5

[Hazard Lab @thehazardlab]

https://t.co/0kqoASz08S
A PHP 0day story: 4 years from Crash to Exp

#php #0day

[Hazard Lab @thehazardlab]

@qatarishehzada Very Deep

[Hazard Lab @thehazardlab]

@Nisar_pk Exact

[Hazard Lab @thehazardlab]

@albatross916 😁😉😁

[Hazard Lab @thehazardlab]

@CEOONemarkPvt Great Work 😁

[Hazard Lab @thehazardlab]

@aidahnadeem Absolutely True 💯

[Hazard Lab @thehazardlab]

@CEOONemarkPvt Great Work

[Hazard Lab @thehazardlab]

@Smaks440 Allhamdulilah