1303181 matches found
cve-2026-43499-m3q-azf1
GhostLock SELinux park — SM-S948U1 / AZF1 m3q Research snapshot of a working SELinux-only park for Samsung Galaxy S26 Ultra SM-S948U1, codename m3q on firmware S948U1UES3AZF1 GKI 6.12.30-android16-5. This package is not a complete root. It flips SELinux to Permissive and holds reclaim long enough...
CVE-2026-85393
creationtimestamp| type| source ---|---|--- 2026-09-03 19:29:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/asgrlxcdrvwc5 2026-09-03 20:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3munahurifc23 2026-09-05 05:20:02+00:00| seen|...
Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting
Nagios-Log-Server-2.1.7-Persistent-Cross-Site-Scripting A stored cross-site scripting XSS in Nagios Log Server 2.1.7 can result in an attacker performing malicious actions to users who open a maliciously crafted link or third-party web page. Nagios Log Server 2.1.7 and older versions are affected...
MicroserviceCVE-2021-39156
This repository does not have a README...
ALLMediaServer-1.6-Buffer-Overflow
CVE-2022-28381 ALLMediaServer 1.6 Remote - Buffer Overflow SEH ALLMediaServer-1.6-Buffer-OverflowMetasploit Proof and Exploit References https://nvd.nist.gov/vuln/detail/CVE-2022-28381 https://vulners.com/cve/CVE-2022-28381 https://vulners.com/cve/CVE-2022-28381...
DEBIAN-CVE-2026-85396
rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Entryextract that fails to properly validate extraction paths using prefix comparison without trailing separators. Attackers can craft archive entries with names like ../uploadbackup/owned.sh to write files outside the...
Security Bulletin: Langflow OSS is affected by arbitrary file read due to path traversal vulnerabilities in file and knowledge base components
Summary Langflow uses filesystem path construction as part of several components and API endpoints, including the Directory component, the Knowledge Base connector ingestion endpoint, and the Knowledge Base flow component. In the Directory component, user-supplied path values are not validated...
samba-trans2open-exploit-report
Informe de Explotación Samba Trans2Open Este repositorio contiene un recorrido técnico completo de la explotación de la vulnerabilidad Samba Trans2Open CVE-2003-0201 en un entorno Linux virtual. La explotación se realizó con fines educativos y de formación en hacking ético. Contenido del Informe...
CVE-2026-83959
creationtimestamp| type| source ---|---|--- 2026-09-03 19:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mun54icful2h...
CVE-2026-85012
creationtimestamp| type| source ---|---|--- 2026-09-03 19:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mun54bf6vr24 2026-09-03 19:04:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iofkhwgq3tae3 2026-09-03 20:32:56+00:00| seen|...
CVE-2026-82526
creationtimestamp| type| source ---|---|--- 2026-09-03 18:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7nqraoi4wx5rc 2026-09-03 19:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mun7unyeuf2o 2026-09-03 20:07:54+00:00| seen|...
Exploits
Exploits A selection of rebuilt and from scratch exploits. Some are existing ones remade for practice, others are self-discovered with CVEs...
CVE-repository
OCD CVE Repository The content provided in this CVE repository is intended for informational purposes only. The vulnerabilities and associated information documented here are provided "as is" and are not subject to any support. By using this repository, you acknowledge and agree that you are usin...
CVE-2026-67399
creationtimestamp| type| source ---|---|--- 2026-09-03 18:19:00+00:00| seen| https://bsky.app/profile/suriq.io/post/3mun2rrmtsc2d 2026-09-04 13:44:24+00:00| seen| https://bsky.app/profile/suriq.io/post/3mup3vpdm4325...
CVE-2026-24118
⚠️ Security Research & Legal Disclaimer 📌 Purpose of This Repository This repository is provided strictly for educational, academic, and authorized cybersecurity research purposes only. It is intended to support understanding of: Security vulnerabilities and exploitation concepts in controlled...
zencart_auth_rce_poc
zencartauthrcepoc CVE-2021-3291 1- login as admin 2- get any modules edit page 3- inspect element any true radiobox 4- change true to true','MODULEORDERTOTALTOTALSTATUS'; echo id; // 5- click update 6- to trig command go again edit page CVE-2021-3291 https://vulners.com/cve/CVE-2021-3291 POC...
CSRF-to-RCE-on-Backdrop-CMS
CSRF to RCE on Backdrop CMS 1.20 This PoC describe how to exploit CSRF on Backdrop CMS Version 1.20 with escalation to RCE. CVE ID CVE-2021-45268 Description The Backdrop CMS version 1.20 allows plugins to be added via ZIP files uploaded to the site. And because it does not have anti-CSRF...
CVE-2026-84813
creationtimestamp| type| source ---|---|--- 2026-09-03 18:08:08+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mun26etchv2b 2026-09-03 19:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mun53eq6pc2b...
CVE-2026-84753
creationtimestamp| type| source ---|---|--- 2026-09-03 18:07:51+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mun25uw4my2g 2026-09-03 18:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mun4jftv4p2o...