CVE-2026-97853

Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision 34 digits by default is applied, so its cost grows with the places argument instead ...

CVE-2026-98264

A flaw was found in the Advanced Linux Sound Architecture ALSA virtio sound driver in the Linux kernel. During device removal or system suspend operations, virtual queues are deleted before the virtual device is reset, allowing the device to access queue memory buffers after they have been freed...

EUVD-2026-96424

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeREX Group Kids Planet allows Reflected XSS. This issue affects Kids Planet: from n/a through 2.2.14.2...

CVE-2026-98263

A flaw was found in the Linux kernel's Realtek RT712 audio codec driver. A local user could exploit this flaw to cause a Denial of Service DoS or unexpected system behavior. The issue arises because audio stream configuration data is left uninitialized before being passed to the SoundWire...

CVE-2026-94590

Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3...

CVE-2022-33980-POC

This repository does not have a README...

cve-2024-28088-poc

This repository does not have a README...

cve-2020-27955-poc

Este repositorio no tiene un README...

CVE-2025-32463

CVE-2025-32463 Sudo chroot Elevación de privilegios Afecta a las versiones de Sudo 1.9.14 a 1.9.17. CVE-2025-32463 se introdujo en Sudo v1.9.14 junio de 2023 con la actualización del código de manejo de coincidencia de comandos cuando se utiliza la función chroot...

CVE-2026-94590 WordPress Sell Downloads plugin <= 1.2.3 - Broken Access Control vulnerability

Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3...

EUVD-2026-96397

Improper Verification of Source of a Communication Channel vulnerability in CodePeople2 Sell Downloads sell-downloads allows Exploitation of Trusted Credentials.This issue affects Sell Downloads: from n/a through 1.2.3...

CVE-2026-94590

The CodePeople2 Sell Downloads WordPress plugin, affecting versions up to and including 1.2.3 , contains a Broken Access Control vulnerability. This issue is characterized as an Improper Verification of Source of a Communication Channel , which can lead to the Exploitation of Trusted Credentials ...

SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation

SOC227 - Elevación de Privilegios en Microsoft SharePoint Server Explotación de CVE-2023-29357 CVE-2023-29357 es una vulnerabilidad crítica de escalada de privilegios que, combinada con otras vulnerabilidades, podría conducir a la ejecución remota de código. La puntuación CVSS para esta...

CVE-2019-5602-poc

Este repositorio no tiene un README...

CVE-2026-98256

A flaw was found in the Linux kernel's signal handling subsystem. A race condition occurs during process execution when managing pending timer signals, allowing the system to reference memory after it has been released. A local attacker could exploit this use-after-free flaw to achieve privilege...

CVE-2021-1732

CVE-2021-1732 La vulnerabilidad ocurre en el controlador gráfico de Windows win32kfull!NtUserCreateWindowEx, donde una llamada de retorno del kernel al modo usuario para asignar memoria y la configuración del atributo tagWND-flag están desincronizadas, lo que permite falsificar el valor de...

io_uring-n-day

CVE-2024-0582 PoC This repository contains a proof of concept for CVE-2024-0582 page-level use after free in iouring used for academic research. It includes a kernel configuration, build and run scripts for a reproducible QEMU environment, and the PoC exploit used in my analysis. Use this code on...

CVE-2024-24136

CVE-2024-24136 : Juego de Matemáticas Cross-Site-Scripting Prueba de ConceptoPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24136.md Prueba de ConceptoPoC : https://github.com/BurakSevben/CVE-2024-24136/blob/main/CVE-2024-24136.md...

CVE-2026-98254

A flaw was found in the Linux kernel's Software I/O Translation Lookaside Buffer swiotlb. During Direct Memory Access DMA bounce operations involving high memory, an incorrect address calculation occurs when an offset crosses a page boundary. This error causes data transfers to read from or...

CVE-2026-98252

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. This flaw allows a local attacker to cause a denial of service DoS due to a race condition in the iWARP port mapper component. Because request structures are added to a shared tracking list before their reference...