invesalius3_vulnerabilities

invesalius3vulnerabilities Intro The https://github.com/invesalius/invesalius3 is the reference, an Open Source Project. Structure Every vulnerability will have the following structure: folder/ |README.md |subfolder/ |artifacts named as CVE-ID if a ID is assigned or as VULN-NAME or TMP-N if no ID...

exploit-poc

In theory, this is a repository to hold publicly released proof-of-concept exploit code. I can't promise how much exploit code I'll release, if any, but if I do, I'll post it here. When I add PoC code, I'll try to organize it by vendor and then by device or application. Zachary Cutlip...

CVE-2026-10795

CVE-2026-10795 CVE-2026-10795 – UpdraftPlus Authentication Bypass CVE-2026-10795 – UpdraftPlus Authentication Bypass PoC ⚠️ Disclaimer: This repository is for educational purposes only. Only use this on systems you own or have explicit permission to test. The author is not responsible for any...

By-Poloss..-..CVE-2026-7515-PoC

CVE-2026-7515: BetterDocs Pro views-get"layouts/encyclopedia/$docstyle", 'doc' = $doc, 'excerpt' = $excerpt, 'dictionarylearnmoretext' = $learnmoretext, 'itemheadingtag' = $itemheadingtag,...

CVE-2021-41160

CVE-2021-41160 FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client...

CVE-research

CVE-research A repository that contains all the working PoC I have crafted for known CVEs, and details on any ongoing research I am currently doing mostly Iot devices Note on working PoC exploit scripts/payloads 1. Use the exploit scripts ethically and responsibly! I will not be responsible for a...

CVE-2025-65318-and-CVE-2025-65319

PoC for CVE-2025-65318 and CVE-2025-65319 CVE-2025-65318 BDU:2025-13740: When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of bo...

Apache YuniKorn 1.9.0 LDAP Group Provider Denial of Service

Apache YuniKorn versions 1.8.0 and 1.9.0 contain an LDAP group provider denial of service vulnerability that causes a resolver panic when a memberOf attribute lacks "CN=". !/usr/bin/env bash Apache YuniKorn 1.9.0 LDAP Group Provider Panic Denial of Service Vendor: The Apache Software Foundation...

dovecot security update

1:2.3.16-18.8 - fix CVE-2026-33605: ManageSieve protocol denial of service via lone CR character RHEL-251989 1:2.3.16-18.7 - fix CVE-2026-42007: use-after-free in pigeonhole editheader RHEL-251952 1:2.3.16-18.6 - fix CVE-2026-40018: incorrect escaping of multi-byte strings in SQL commands...

Important: python3.13-tornado

Issue Overview: Tornado before 6.5.8 contains a memory amplification vulnerability in parsemultipartformdata that splits multipart data before validating the maxparts limit. Attackers can send crafted multipart requests with many parts to create large transient lists, exhausting server memory and...

Important: python-tornado

Issue Overview: Tornado before 6.5.8 contains a memory amplification vulnerability in parsemultipartformdata that splits multipart data before validating the maxparts limit. Attackers can send crafted multipart requests with many parts to create large transient lists, exhausting server memory and...

Important: python3-tornado

Issue Overview: Tornado before 6.5.8 contains a memory amplification vulnerability in parsemultipartformdata that splits multipart data before validating the maxparts limit. Attackers can send crafted multipart requests with many parts to create large transient lists, exhausting server memory and...

Important: python-tornado

Issue Overview: Tornado before 6.5.8 contains a memory amplification vulnerability in parsemultipartformdata that splits multipart data before validating the maxparts limit. Attackers can send crafted multipart requests with many parts to create large transient lists, exhausting server memory and...

PT-2026-110649

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or...

CVE-2026-14266

CVE-2026-14266 — 7-Zip XZ Decoder Heap Buffer Overflow Critical Severity | CVSS: 8.8 High | CWE-122: Heap-based Buffer Overflow Affected: 7-Zip ≤ 26.01 | Patched: 7-Zip 26.02 2026-06-25 Discovered & Analyzed by: Li Yuxuan liyuxuan504-byte and team Executive Summary A heap buffer overflow exists i...

CVE-2024-32640

CVE-2024-32640 MySQL Blind SQL Injection Proof of Concept This Python script demonstrates a time-based blind SQL injection exploit for MySQL databases , specifically designed for CVE-2024-32640. It can be used to verify vulnerability in a target URL, and if the vulnerability exists, extract...

vmware-escape-CVE-2023-20872-poc

vmware-escape-CVE-2023-20872-poc...

CVE-2020-7247

CVE-2020-7247 Proof Of Concept Exploit for CVE-2020-7247 Remote Execution on OpenSMTPD 6.6.2 OpenSMTPD 6.6.2 https://www.cvedetails.com/cve/CVE-2020-7247 tested on: OpenBSD 6.6 credits to Marco Ivaldi [email protected] for payload Usage remote $ go run CVE-2020-7247.go -u 192.168.0.2 -p 25 -...

CVE-2016-8863

Objetivos pupnp release-1.6.18 ... ... ejecutándose en i386 Ubuntu 16.04. Corrección commit 9c099c2923ab "Corrige el acceso fuera de los límites en createurllist CVE-2016-8863"...

CVE-2021-27188

CVE-2021-27188 Suggested description The FX Aggregator terminal client by "Sovremennye Delovye Tekhnologii" allows attackers to cause a denial of service access suspended for five hours by making five invalid login attempts to a victim's account. VulnerabilityType Other DoS Vendor of Product OOO...