CVE-2026-114038

A flaw in device-mapper-multipath allows a local user to trigger an out-of-bounds read by sending a command containing a format string with a trailing percent character to the multipath daemon . This vulnerability can result in information disclosure by exposing unintended daemon memory or cause ...

CVE-2026-114038

A flaw was found in device-mapper-multipath. A local user can trigger an out-of-bounds read by sending a command with a format string ending in a trailing percent character to the multipath daemon. This issue can allow the user to expose unintended daemon memory, leading to information disclosure...

MajorDoMo-CVE-2026-27179

CVE-2026-27179 Proof of Concept Academic & Defensive Research Notice This repository contains a proof-of-concept PoC developed strictly for academic analysis, defensive research, and vulnerability validation purposes. The objective of this project is to help security researchers, defenders, and...

librsvg: Use-after-free when XML includes have duplicated entities

A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...

PoC-Simulator_CVE-2026-27778

PoC-SimulatorCVE-2026-27778 Edit in StackBlitz next generation editor ⚡️...

SUSE CVE-2025-52290

A NULL pointer dereference in the avprivh264hasnumreorderframes function of Ffmpeg version N-119856-gbe46370941 allows attackers to cause a Denial of Service DoS via processing a crafted media file...

CVE-2026-27831-POC

CVE-2026-27831-POC Poc Exploit for CVE-2026-27831 This is proof of concept exploit for remote heap based out-of-bound read at rldns version 1.3 that causes denial of service. rldns is an open source DNS server for linux, freebsd & netbsd, running on x8664 architecture. Rldns Version 1.3 has a...

GitLab-Graphql-CVE-2020-26413

GitLab-Graphql-CVE-2020-26413 GitLab-Graphql-CVE-2020-26413 POC Single verification: python3 GitlabCVE-2020-26413.py -u http://127.0.0.1 Batch verification python3 GitlabCVE-2020-26413.py -f target.txt The vulnerability results will be generated in the current path of the script...

CVE-2019-25065-exploit

CVE-2019-25065 - POC This is a POC of CVE-2019-25065 - OS command injection in OpenNetAdmin v18.1.1 The exploit is written in bash, it supports linux environment. was tested on kali linux 2024.4, and Ubuntu 22.04.5 LTS dependencies: gridsite-clients debian package...

checkout-index

checkout-index - Reproducer for CVE-2025-22620 This is the proof of concept code for RUSTSEC-2025-0001 CVE-2025-22620, GHSA-fqmf-w4xh-33rh. It is the same code as in the advisory, but in the form of a Rust project, with Cargo.toml and Cargo.lock included. This repo was useful while writing the...

go-toolset:rhel8 security, bug fix, and enhancement update

An update is available for module.golang, delve, golang, module.delve. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Go Toolset provides the Go programming...

RLSA-2026:86203 Important: go-toolset:rhel8 security, bug fix, and enhancement update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: net/http: golang: golang: Denial of Service via crafted HTTP Range headers CVE-2026-78667 crypto/tls: golang: crypto/tls: Denial of Service via multiple ECH outer extension...

CVE-2026-113199

A flaw was found in the Payments component of chromium-browser. An out-of-bounds read vulnerability allows a remote attacker to access memory within the browser's isolated sandbox environment by tricking a user into visiting a crafted HTML page. Successful exploitation leads to information...

CVE-2026-113045

A flaw was found in chromium-browser. An out-of-bounds read vulnerability in the Offline feature allows a remote attacker to access memory contents inside the application sandbox by convincing a user to open a crafted HTML page. Successful exploitation could lead to unauthorized information...

CVE-2026-113309

A flaw was found in the Media component of chromium-browser. This vulnerability allows a remote attacker to cause an information disclosure by triggering an out-of-bounds read. By persuading a user to load a specially crafted HTML page, an attacker can access sensitive memory contents within the...

CVE-2026-113812

A flaw was found in Mozilla::CA. The Certificate Authority CA bundle includes a root certificate linked to compromised intermediate certificates. A remote attacker capable of intercepting or redirecting network traffic could exploit this flaw using the compromised keys to impersonate a Transport...

CVE-2026-113070

A flaw was found in chromium-browser. An out-of-bounds read vulnerability in the GetUserMedia component allows a remote attacker to read memory inside the browser sandbox by enticing a user to view a crafted HTML page. This issue results in information disclosure and may expose sensitive data...

cve-2025-59934

cve-2025-59934 cve-2025-59934 PoC...

CVE-2026-113010

An out of bounds read flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=518240362 https://code.google.com/p/chromium/issues/detail?id=113010...

PT-2026-120547

Uncontrolled resource consumption in the streaming RPC component of Apache bRPC version 1.18.0 allows a remote attacker to exhaust server memory and cause denial of service by sending a single RPC request that declares an excessive number of streams. Root Cause: In the streaming RPC feature, a...