902105 matches found
Security Bulletin: IBM MQ C client library could allow an authenticated attacker to cause a denial of service by sending a specially crafted message that crashes consuming applications (CVE-2026-14511)
Summary IBM MQ has addressed a potential denial of service issue in the IBM MQ C client library Vulnerability Details CVEID:CVE-2026-14511 DESCRIPTION: IBM MQ could allow an authenticated user to cause a denial of service by sending a specially crafted message that crashes consuming applications...
strutt-cve-2014-0114
CVE-2014-0114 - Vulnerability in Struts 1 Parameters in a POST or GET request are handled as properties to be set with the form as a starting point. Parameters can be a path to a nested object. Apache Struts 1.x can be manipulated to call getClass on Form Beans. For example, one can directly...
Malware-IOCs
Malware Repository of Indicators of Compromise...
log4j2_dos_exploit
Description about author: iAmSoScArEd blog: https://www.cnblogs.com/iAmSoScArEd/ github: https://github.com/iAmSOScArEd/ date: 2021-12-20 log4j2 dos exploit log4j2 dos exploit script CVE-2021-45105 Exploit CVE-2021-45105 exploit script Usage how to use English: Log4j2dos.py -u -m -d -H -l -t...
CVE-2020-9054
CVE-2020-9054 An incomplete CVE-2020-9054 PoC. I might even finish this sometime, but its been rotting on a hard drive since forever...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.18 security and extras update
Red Hat OpenShift Container Platform release 4.22.18 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...
CVE-2024-23722-poc
CVE-2024-23722-poc Usage python3 exploit.py http://127.0.0.1:8888 port is currently not open port is currently not open port is currently not open port is currently not open Server might have crashed port is currently not open port is currently not open port is currently not open Server might hav...
CVE-2023-38646-Poc
CVE-2023-38646-Poc usage python check.py ip port Vulnerable version Metabase Enterprise 1.46 1.46.6.1 Metabase Enterprise 1.45 1.45.4.1 Metabase Enterprise 1.44 1.44.7.1 Metabase Enterprise 1.43 1.43.7.2 Metabase open source 0.46 0.46.6.1 Metabase open source 0.45 v0.45.4.1 Metabase open source...
CVE-2026-13695
SQL injection SQLi vulnerability—specifically a UNION-based vulnerability—in the Integratec application that affects the sInfo parameter sent via POST to the endpoint /login/apLogin.aspx/start. Successful exploitation of this vulnerability could allow an attacker to steal data from the database,...
CVE-2026-104679
VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references. Loading a specially crafted project file may the product to initiate unintended communication, potentially leading to the leak of sensitive information from the device where the product is install...
CVE-2023-38831-WinRAR-Exploit
CVE-2023-38831-WinRAR-Exploit Proof of concept PoC exploit for WinRAR vulnerability CVE-2023-38831 vulnerability Usage: python poc.py Example: python poc.py cutepicture.jpg exploit.bat output.rar PoC Video: https://youtu.be/TRe0eGIsB5k...
CVE-2020-0796-LPE
CVE-2020-0796-LPE SMBGHOST local privilege escalation https://github.com/ZecOps/CVE-2020-0796-LPE-POC https://github.com/danigargu/CVE-2020-0796...
Log4j-Exploit-CVE-2021-44228
Log4j-Exploit-CVE-2021-44228 Log4Shell Vulnerability Test Tool https://log4shell.tools/ Exploit with java already included, to avoid creating an account etc.. http://www.mediafire.com/file/bs1spnysc6fbz1a/log4j-shell-poc%25281%2529.zip/file pip install -r requirements.txt $ python3 poc.py --useri...
log4py
log4py pythonic pure python RCE exploit for CVE-2021-44228 log4shell 1. run a vulnerable service like https://github.com/zzzz0317/log4j2-vulnerable-spring-app 2. change settings in exploit.py 3. pwn This is for educational use only mostly for my own lol This might only be useful after some...
CVE-2026-20230
CVE-2026-20230 - Cisco Unified CM ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone https://github.com/HORKimhab/CVE-2025-46822 cd...
CVE-2026-111408 WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a through 11.2.7...
CVE-2026-111408 WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a through 11.2.7...
EUVD-2026-104133
Deserialization of Untrusted Data vulnerability in ExpressTech Quiz And Survey Master quiz-master-next allows Object Injection.This issue affects Quiz And Survey Master: from n/a through 11.2.7...