CVE-2026-112897

Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. The decodeStrip and decodeTile buffers can be larger than the bytes written by libtiff, but Pillow conver...

CVE-2026-112897

The Pillow Python imaging library (versions 5.3.0 through 13.0.0 ) is vulnerable to an issue where it can return uninitialized memory as pixels. This occurs when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. Specifically, the _decodeStrip and _decodeTile buffers may...

EthernalBlue_report

EthernalBlue Report What is it? This is an exploit developed by the NSA, stolen by hacker group, primarily known for being used in ransomware attacks, such as WannaCry or NotPetya... Why did you make this report? I've been asked to do this report on the Tryhackme EthernalBlue room, but without...

CVE-2025-60357

CVE-2025-60357- NoSQLMongoDB Injection Vulnerability and Product description AhnLab EPP Management is a globally recognized next-generation advanced endpoint protection platform that integrates patch management, advanced malware detection, EDR, and XDR capabilities. NoSQLMongoDB Injection in was...

CVE-2021-1675-PrintNightmare-Analysis

Vulnerability Research: Local Privilege Escalation and RCE via Windows Print Spooler PrintNightmare / CVE-2021-1675 The repository contains a detailed technical report write-up and an analysis of the exploit concept for a critical vulnerability in the Windows Print Spooler service, which allows a...

CVE-2026-98536

A flaw was found in the Linux kernel's writeback subsystem. This vulnerability can lead to a Denial of Service DoS when the routine responsible for cleaning up offline control group writeback structures fails to report a quiescent state during extended cleanup passes under certain preemption...

CVE-2024-13479

CVE-2024-13479 LTL Freight Quotes – SEFL Edition = 3.2.4 - Unauthenticated SQL Injection Description The LTL Freight Quotes – SEFL Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropshipeditid' and 'editid' parameters in all versions up to, and including, 3.2.4 due to...

CVE-2026-110685

A flaw was found in perl-Cpanel-JSON-XS. When the allowtags configuration is enabled, a tagged value's class name and argument array are decoded and passed to the class's THAW method. Both are released only after the THAW method returns. Therefore, if a THAW method dies throws an exception, the...

CVE-2026-110678

A flaw was found in perl-Cpanel-JSON-XS. The parser appends each chunk to its buffer. In scalar or list context, it compares maxsize with how far it has progressed, not with the total buffer length. A chunk that starts with a NUL byte stops the parser before it progresses, and a call in void...

CVE-2026-110672

A flaw was found in perl-Cpanel-JSON-XS. A quoted key of 24 or more bytes, or one containing a non-ASCII byte or an escape sequence, is decoded into a new scalar. Nothing frees that scalar when the object is rejected for a missing ':' after the key, or for a duplicate key. Duplicate keys are...

CVE-2017-11882

CVE-2017-11882 43b Original script from https://github.com/embedi/CVE-2017-11882 109b Original script from https://github.com/unamer/CVE-2017-11882/ Kudos, unamer's code can now execute shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...

spd_dump-macos

spddump for macOS English | 简体中文 macOS port of the UNISOC Spreadtrum BootROM/FDL flashing toolchain. Based on ilyakurdyukov/spreadtrumflash MIT, with execaddr2 — the CVE-2022-38694 signature-verification bypass of the closed-source spddump — reimplemented, completing the full chain on macOS arm64...

CVE-2026-20217

ZendTo 6.15-8 / ClamAV exact-profile RCE and root-variant reproduction This directory is a standalone, authorized-lab reproduction bundle for the no-account ZendTo-to-ClamAV code-execution chain and its separate default- profile Smarty/root-cron continuation. It includes: the complete runnable Po...

CVE-2021-34527

CVE-2021-34527 CVE-2021-34527 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution capability, and a C rendition for local privilege escalation. I had not se...

cve-2017-8890-msf

Module: Phoenix Talon CVE 2017-8890 This may resolve issue 8571, which requests Phoenix Talon modules. Overview of 2017-8890 This CVE: is the most serious member of the Phoenix Talon class of Linux kernel vulnerabilities. No POC of this CVE exists in the Exploit DB. But other public POC's are...

CVE-2026-64849.yaml

id: CVE-2026-64849 info: name: MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass author: DhiyaneshDk severity: critical description: | MLflow 3.15.0 contains an information disclosure vulnerability caused by improper validation of webhook URLs allowing attackers to reach interna...

ubl-itel-s23

Unlock Bootloader — Itel S23 S665L / Unisoc T606 Guide to unlock the bootloader on the Itel S23 S665L using the CVE-2022-38694 exploit on the Unisoc T606 UMS9230 chipset. Device Info Property| Value ---|--- Brand| Itel Model| S665L S23 Android| 12 SDK 31 Build|...

CVE-2026-112770

Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group filter, which invokes non-string arrow arguments as callables without the checkArrow guard used by other arrow-accepting filters. Authenticated control panel users can pass an...

mcp-attack-detection-sentinel

MCP Attack Detection — Sentinel Research Lab Sentinel detection research for MCP Model Context Protocol attack patterns : unusual identity access after an MCP-related event, tool-definition mutation, cross-resource access, and possible post-exploitation behavior. The rules map to the OWASP Top 10...

CVE-2014-4076

CVE-2014-4076 PoC This proof of concept directly copied from its original python version and rewritten in C++. Build This project is built with Visual Studio 2013 Update 4. Notice Only users that in Administrators group can open the device and perform IO controls, which means the exploit only...