CVE-2026-108440

A stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) and is classified under CWE-121 . While the documents confirm the vulnerability and its impact, no specific exploit deta...

CVE-2026-108439

A heap-based buffer overflow vulnerability exists in Microsoft Office Word , which allows an unauthorized attacker to execute code over a network. The vulnerability has a CVSS 3.1 score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific affe...

EUVD-2026-102449

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108437

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The vulnerability is associated with CWE-122 and has a CVSS 3.1 base score of 8.8 (High) . While the specific component or file is not named in the provided documents, the impact ...

CVE-2026-108431

A stack-based buffer overflow vulnerability exists in Microsoft Office Word , which could allow an unauthorized attacker to execute code over a network. The vulnerability is confirmed by Microsoft and has a HIGH base severity score of 8.8. Exploitation details are not provided in the documents. R...

EUVD-2026-102441

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-102440

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108428

A heap-based buffer overflow vulnerability exists in Microsoft Office Word , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability's CVSS 3.1 score is 8.8 (High) , with an attack vector of NETWORK and low attack complexity, though it require...

CVE-2026-108430

A heap-based buffer overflow exists in Microsoft Office Word , which may allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as HIGH severity (CVSS 3.1 score of 8.8). While the impact includes high confidentiality, integrity, and availab...

CVE-2026-108429

A heap-based buffer overflow vulnerability exists in Microsoft Office Word . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified with a high CVSS v3.1 base score of 8.8 . No specific software versions, affected components, or ...

CVE-2026-108427

A heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. This vulnerability is characterized by improper input validation (CWE-20 , CWE-122 ). The impact of successful exploitation includes high levels of confidentiality , integrity , a...

EUVD-2026-102438

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

React2Shell

React2Shell – Advanced Discovery & Exploitation Framework An advanced React Server Components RSC vulnerability scanner and exploiter for CVE-2025-55182 and CVE-2025-66478 affecting Next.js applications. This tool expands upon the original React2Shell research and proof-of-concept by introducing...

POC-CVE-2026-10134

Description PoC exploit code for CVE-2026-10134 Usage python3 poc.py -u -name -pwd -c...

CVE-2026-28289

🚨 CVE-2026-28289 — “Mail2Shell” Zero-Click Unauthenticated RCE in FreeScout via Email Attachment Bypass 📖 Overview CVE-2026-28289 , nicknamed Mail2Shell , is a critical zero-click Remote Code Execution RCE vulnerability affecting FreeScout. An attacker can send a specially crafted email to a...

CVE-2024-51793

Wordpress Computer Repair Shop = 3.8115 - Unauthenticated Arbitrary File Upload CVE-2024-51793 The CRM WordPress Plugin – RepairBuddy plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 3.8115. This makes it possib...

CVE-2018-16763-Fuel-CMS-1.4.1-Remote-Code-Execution-PoC

CVE-2018-16763 — Fuel CMS 1.4.1 Remote Code Execution PoC Unauthenticated RCE vulnerability in Fuel CMS 1.4.1. The filter parameter in the /fuel/pages/select/ endpoint is passed unsanitized to a eval call in the PHP backend, allowing arbitrary code execution via a crafted payload. Unlike blind...

CVE-2024-21546

UniSharp Laravel Filemanager Unauthenticated RCE CVE-2024-21546 This repository contains security assessment tooling, detection templates, and an automated exploit toolkit for identifying and exploiting Unauthenticated Remote Code Execution RCE in applications utilizing the...

CVE-2025-55182-poc

CVE-2025-55182-poc A proof-of-concept PoC exploit for CVE-2025-55182 , targeting an unauthenticated Remote Code Execution RCE vulnerability in Next.js Server Actions. This exploit abuses prototype pollution during the deserialization of React Server Components RSC multipart payloads to inject...

RP_Import_RCE

Real Player 'external::Import' Arbitrary file download, Directory Traversal Vulnerabilities leads to Remote Code Execution video demo: https://youtu.be/CONlijEgDLc Real Player uses Microsoft Internet Explorer functionality and exposes properties and methods through a special mean which is...