Advantech R-SeeNet - Cross-Site Scripting

Advantech R-SeeNet contains a cross-site scripting vulnerability in the devicegraphpage.php script via the deviceid parameter. A specially crafted URL by an attacker can lead to arbitrary JavaScript code execution. id: CVE-2021-21802 info: name: Advantech R-SeeNet - Cross-Site Scripting author:...

Advantech R-SeeNet 2.4.12 - Cross-Site Scripting

Advantech R-SeeNet 2.4.12 contains a reflected cross-site scripting vulnerability in the sshform.php script functionality. id: CVE-2021-21800 info: name: Advantech R-SeeNet 2.4.12 - Cross-Site Scripting author: arafatansari severity: medium description: | Advantech R-SeeNet 2.4.12 contains a...

Advantech R-SeeNet 2.4.12 - Cross-Site Scripting

Advantech R-SeeNet 2.4.12 contains a reflected cross-site scripting vulnerability in the telnetform.php script functionality. id: CVE-2021-21799 info: name: Advantech R-SeeNet 2.4.12 - Cross-Site Scripting author: arafatansari severity: medium description: | Advantech R-SeeNet 2.4.12 contains a...

Advantech R-SeeNet 2.4.12 - OS Command Injection

Advantech R-SeeNet 2.4.12 is susceptible to remote OS command execution via the ping.php script functionality. An attacker, via a specially crafted HTTP request, can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering...

APsystems ECU-R Firmware - Command Injection

Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrary commands as root using the timezone parameter. id: CVE-2022-45699 info: name: APsystems ECU-R Firmware - Command Injection author: pussycat0x severity:...

kernel: net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket

A flaw was found in the Linux kernel's Shared Memory Communications over RDMA SMC-R subsystem. A race condition allows a network socket to be released and freed while incoming messages are still being processed, leading to a use-after-free condition. A local attacker interacting with active SMC-R...

Malware in more-resour-ces-gen-stickman-legends-f-r-e-e-h-a-c-k-gen-erat-or-bv4n15

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in new-code-unlim-ited-jurassic-world-m-od-f-r-e-e-wuo1ky

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

EUVD-2026-115232

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a preempted user-mode module thread's registers in privileged mode at addresses taken from the thread's stack pointer, without checking that pointer against the thread's stack. A user-mod...

CVE-2026-119378

SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make applications use freed heap memory by manipulating the %node shadow table. Attackers can supply a database declaring %node WITHOUT ROWID or with a RAISEIGNORE trigger so nodeWrite...

VulnLLM-R

VulnLLM-R: Specialized Reasoning LLM for Vulnerability Detection Paper: arXiv:2512.07533 Code & Data: GitHub Demo: Web demo Model: 7B Model Environment and dataset 🛠️ Create environment Install Git LFS and clone the repository LFS files are fetched automatically during clone git lfs install...

badspin

Bad Spin: Android Binder LPE Author: Moshe Kol Privilege escalation exploit from unstrustedapp for Android Binder vulnerability CVE-2022-20421. The vulnerability is patched on Android's Security Bulletin of October 2022. The exploit works on devices running kernel versions 5.4.x and 5.10.x, and i...

Relapse-Exploit

PS5 Relapse Exploit Supported firmware: 7.00 through 13.60. Usage The default payloads are stored in payloads/ after a successful run, the ELF loader listens on port 9021. Stability notes Webkit may need several attempts, reload the page if the browser stalls. The kernel exploit may hang or panic...

CVE-2019-25485

🐞 CVE-2019-25485: R 3.4.4 - Stack-Based Buffer Overflow x86 and x64 Stack-based buffer overflow in R 3.4.4. Full exploitation on x86, but only RIP control with gadget analysis on x64 due to program constraints. The same vulnerability across two architectures, leading to different exploitation...

CVE-2025-66678

CVE-2025-66678 In Hardware Read & Write Utility v1.25.11.26, the driver exposed abritrary MSR read and write, as well as phsyical memory read and write through MmMapIoSpace, both of which enable kernel code execution. PoC Detail The PoC will swap the primary token of the current process to become...

CVE-2025-32463-PoC

CVE-2025-32463 – Privilege Escalation via Sudo chroot 📝 Overview CVE-2025-32463 is a local privilege escalation vulnerability affecting the sudo utility. It allows a regular user to escalate privileges to root by exploiting the -R option which sets a custom runtime root directory together with...

CVE-2025-32463_chwoot

CVE-2025-32463sudochwoot Declaration: This script is only for security testing and should not be used for illegal purposes. CVE-2025-32463 sudochwoot privilege escalation vulnerability verification script Description Compared to other POCs available on the Internet, this script takes into account...

gvcidrv64

hi hackers. GVCIDrv64.sys is the signed kernel driver that ships with Gigabyte's BIOS utility. It creates \.\GVCIDrv64 with no security descriptor, so any local user can open it no admin, no UAC. It exposes 3 IOCTLs with zero access control: map 32 MB of physical memory 0x9C406580, unmap...

win-def-clickfix

win-def-clickfix win-def-clickfix is a detection replica for ClickFix / Win+R command lines, rebuilt by reverse-engineering Microsoft Defender 's mpengine.dll. It runs a command line through the recovered normalizer/deobfuscator FUN1800a2500 and matches it against the 807 VDM-extractedCMDHSTREXT...

CLEANSTART-2024-TH28235 Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access

Security vulnerability affects the xen package. Incomplete cleanup from specific special register read operations in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...