CVE-2026-98611

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. The bpfcryptoctxcreate function attempts to read reserved fields from a parameter structure prior to verifying that the supplied buffer is sufficiently large. A local user capable of loading BPF programs can exploit this...

CVE-2026-98610

A flaw was found in the Linux kernel's Hierarchical Fair Service Curve HFSC network packet scheduler. A local user with network administration privileges, such as within a user namespace, can exploit this flaw to cause a Denial of Service DoS. Due to a lack of revalidation when traffic class leve...

CVE-2026-9490

CVE ID: CVE-2026-9490 Researcher: Vo Duc Thang ugvxb Acknowledgement: https://community.acer.com/en/kb/articles/19668 1. Executive Summary A critical security vulnerability has been identified in the Acer Care Center service ACCSvc.exe. The vulnerability allows any authenticated local user to...

CVE-2022-46169

CVE-2022-46169 POC Proof of concept / CTF script for exploiting CVE-2022-46169 in Cacti, versions =1.2.22 This script was written to solve a CTF challenge. It was based on the following example scripts - I had difficulty understanding what these scripts actually did, so I re-wrote my own...

CVE-2022-26265

CVE-2022-26265 The first proof of concept of the Contao CMS RCE This repo is part of the hgrab-framework Affected product Contao CMS v1.5.0 Installation Install the app on the server...

CVE-2018-7600

CVE-2018-7600 Proof of Concept Exploit for Drupal CVE-2018-7600 RCE with Pseudo-Shell and proxy support...

log4j-shell-poc

This repository does not have a README...

CVE-2018-8065

Flexense HTTP Server Server-Enable web server on port. Module triggers a user space write access violation on syncbrs.exe memory region. Number of requests that will crash the server changes between 200-1000 depending on the OS version and system memory. Sync Breeze Enterprise 10.6.24 version...

CVE-2021-2471

CVE-2021-2471 - XXE in MySQL Connector/J Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.26 and prior. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access ...

CVE-2026-31431

CVE-2026-31431 - Copy Fail Copy Fail is a logic bug in the Linux kernel's crypto subsystem CVE-2026-31431. A 2017 optimization in algifaead.c accidentally placed page cache pages into a writable scatterlist. The authencesn AEAD algorithm writes 4 scratch bytes past the output boundary during...

cve-2019-1096-poc

cve-2019-1096-poc Source: https://cpr-zero.checkpoint.com/vulns/cprid-2131/ https://cpr-zero.checkpoint.com/assets/attachments/cprid-2131/poc.c...

CVE-2026-55957-PoC

This repository does not have a README...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.52 security and extras update

Red Hat OpenShift Container Platform release 4.19.52 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...

CVE-2022-38604

Exploits for CVE-2022-38604 FilesystemEoPs is a copy of this repository with the addition of the x64 compiled projects. Here you can find my Arbitrary File Deletion Vulnerability report. Here you can understand how to use an Arbitrary File Deletion primitive to achieve a Local Privilege Escalatio...

CVE-2023-24998

When multipartResolver is not defined or StandardServletMultipartResolver is registered Uses FileUpload from Tomcat's internal package In this case, the Tomcat version must be greater than 9.0.71 spring boot 2.7.8 Tomcat's maxParameterCount Default: 10000 setting is injected into...

CVE-2020-0609

CVE-2020-609-POC Running the PoC against a RDG server with UDP open on port 3391, will cause the RDG instance to crash. Thanks to @Ollypwn for sparring during development...

PoC-CVE-2026-20841

PoC CVE-2026-20841 Description This project is a simple Proof of Concept PoC regarding Windows Notepad vulnerability about "remote code execution". Attackers have the ability to build a special .md file and by tricking users with Social Engineering skills into clicking the link within the .md fil...

copy-fail-CVE-2026-31431-C

copy-fail-CVE-2026-31431-C Verified on ubuntu 24,ubuntu 25,kali 2026. gcc -o exploit exploit.c -lz && chmod +x exploit && ./exploit Static compilation sudo apt install zlib1g-dev gcc -static -o exploit exploit.c -lz or aarch64-linux-gnu-gcc -o exploit exploit.c -lz -static...

copyfail

Overview Copy Fail CVE-2026-31431 is a logical vulnerability in the Linux kernel that allows a local unprivileged user to escalate privileges to superuser root. The vulnerability belongs to the Local Privilege Escalation LPE class, does not require complex exploitation conditions such as race...

CVE-2023-27742

CVE-2023-27742 IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login. Description IDURAR ERP/CRM v1 was discovered to contain a SQL injection vulnerability via the component /api/login. Vulnerability Type SQL Injection Vendor of Product IDURAR...