Important: Red Hat Security Advisory: OpenShift Container Platform 4.17.59 packages and security update

Red Hat OpenShift Container Platform release 4.17.59 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.17. Red Hat Product Security has rated this update as having a...

CVE-2026-24291

CVE-2026-24291 poc win1021h2190446937amd64 vs2022...

CVE-2026-20841_notepad_analysis

Purpose Investigate the Microsoft Notepad RCE vulnerability CVE-2026-20841, perform binary analysis, and create a PoC exploit for learning purposes. Role Assignment Launch an Agent Team to execute the role assignment I have in mind. Binary Hunter: Collects binaries before and after the patch is...

testanull-CVE-2021-42321_poc.py

This repository does not have a README...

CVE-2021-21017

CVE-2021-21017 Not another Adobe Reader Byte Order Mark bug : IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl != char 0x0 && relu...

CVE-2025-61303

CVE-2025-61303 - RecordedFuture Triage: Denial-Of-Analysis via Recursive Process Forking Description RecordedFuture Triage Sandbox Windows 10 build 2004 and Windows 10 LTSC 2021 contains a critical vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to...

cve-2025-59934

cve-2025-59934 cve-2025-59934 PoC...

CVE-2023-50164-PoC

CVE-2023-50164 Apache Struts path traversal to RCE vulnerability - Proof of Concept This PoC has been made to test an RCE Remote Code Execution by exploiting the Apache Struts2 vulnerability. Build the image and run a container: $ DOCKERBUILDKIT=1 docker build . -t struts2-rce-poc && docker run...

PoC_CVE-2025-11579

PoC CVE-2025-11579 Overview rardecode versions = 2.1.1 fail to restrict the dictionary size when reading large RAR dictionary sizes, which allows an attacker to provide a specially crafted RAR file and cause Denial of Service via an Out Of Memory Crash. Exploit We craft a RAR file with an...

CVE-2025-56223

CVE-2025-56223 Denial of Service – Upload Document API Description An attacker can rapidly upload a large volume of files to cause denial of service. CVSS Score: 7.1 High Attack Type Remote Authenticated Affected Versions Versions before 8.6.8 Discovered By: Yazan Abu-Nadi...

CVE-2025-56219

CVE-2025-56219 Lack of Rate Limiting – Add User API Description An attacker can automate the creation of a large number of Users in a short period of time to cause a DoS. CVSS Score: 7.1 High Attack Type Remote Authenticated Affected Versions Versions before 8.6.8 Discovered By: Yazan Abu-Nadi...

CVE-2026-87029

The undici HTTP client library for Node.js is vulnerable to a Denial of Service (DoS) attack in versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1. The root cause is an unhandled exception in the decompress interceptor , where exceptions thrown asynchronously from zlib stream event callbacks...

CVE-2026-87029 undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor

undici is an HTTP client library for Node.js. In versions 7.15.0 through 7.30.0 and 8.0.0 through 8.12.1, its decompress interceptor forwards decompressed response data to the downstream handler from zlib stream event callbacks without catching exceptions those callbacks may throw, and while...

CVE-2026-110715

A flaw was found in MuJS. The JavaScript engine fails to properly validate array boundaries when sorting an array whose length property has been enlarged. By supplying specially crafted JavaScript code, an attacker can trigger out-of-bounds memory operations, potentially leading to memory...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data (CVE-2026-105442)

Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a deserialization of untrusted data vulnerability. Vulnerability Details CVEID:CVE-2026-105442 DESCRIPTION: IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Libert...

CVE-2026-110679

A flaw was found in OpenSIPS. An out-of-bounds read vulnerability in the rtpproxy module allows a remote attacker to cause a Denial of Service DoS or access sensitive memory contents. By sending specially crafted requests handled by the rtpproxy offer and answer functions, an attacker can cause t...

CVE-2026-109932

The undici HTTP client library for Node.js (versions 5.15.0-6.29.0 , 7.0.0-7.30.0 , and 8.0.0-8.12.1 ) contains a vulnerability where its WebSocket client can be forced into a Denial of Service (DoS) condition. A malicious or compromised server can stream small PING frames while refusing to read ...

CVE-2026-109932 undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering

undici is an HTTP client library for Node.js. In versions 5.15.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its WebSocket client, including the bundled WebSocket exposed by Node.js, can be driven to exhaust process memory by a malicious or compromised WebSocket server. For...

CVE-2026-100352

A flaw was found in kin-openapi. A remote, unauthenticated attacker can exploit this vulnerability by submitting a specially crafted YAML request containing non-finite numeric values, such as Not-a-Number or infinity, to an endpoint with numeric constraints. Because the validation process fails t...

CVE-2026-100349

A flaw was found in kin-openapi. This vulnerability allows an attacker to cause a Denial of Service DoS by triggering an application crash during response validation. When an OpenAPI specification declares a response header using content rather than a schema, the validation logic attempts to...