IHxExec

IHxExec POC to execute arbitrary code on behalf of another user. U can read more about the technique here: https://cicada-8.medium.com/process-injection-is-dead-long-live-ihxhelppaneserver-af8f20431b5d https://www.youtube.com/watch?v=bK3ufqZxkxc Note the attached video:...

CVE-2026-110682

Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incrparse. allownonref is enabled by default and incrparse inherits it. A top-level number, true, false or null has no closing delimiter, so the incremental parser decodes...

CVE-2026-80229

A flaw was found in libcurl when performing transfers via its multi interface with OpenSSL 3 provider configurations. Pooled TLS connections can outlive their originating easy handles, causing an allocated library context to be prematurely freed. This leaves the active connection with a dangling...

CVE-2026-88900

A flaw was found in Apache Camel's camel-jgroups component. This vulnerability allows an unauthenticated attacker on an adjacent network to achieve arbitrary code execution on the target system. By default, the component joins cluster communication channels without authentication or encryption an...

CVE-2026-110867

A flaw was found in Renovate. An attacker controlling an externally referenced configuration preset can bypass the environment variable allowlist. By defining restricted environment variables within a shared preset, the attacker can override critical execution settings such as PATH or LDPRELOAD i...

CVE-2026-93753

A flaw was found in deepmerge. This vulnerability, known as prototype poisoning, allows an attacker to inject malicious properties into an application's object prototype. This occurs in the mergeObject function due to insufficient validation of keys during object merging. By supplying specially...

CVE-2026-93318

A flaw was found in BuildKit. A remote attacker can supply a crafted container image that advertises layer identifiers matching another image without containing the actual layer contents. Because BuildKit does not validate that these identifiers match the layer data before caching them, a shared...

CVE-2026-70007

A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthenticated remote attacker to execute arbitrary code on the target system over the network. By convincing a user to process specially crafted input, an attacker can trigger memory corruption and compromise the affected...

CVE-2026-93479

A flaw was found in NGINX. An unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP requests when the map directive uses regular expression regex matching and references regex capture variables before referencing the map output variable. This can lead to a heap...

CVE-2023-38831-RaRCE

RaRCE, Exploit generator for CVE-2023-38831 This is an easy to install and easy to use, versatile exploit generator for CVE-2023-38831, a vulnerability that affects WinRAR versions before 6.23. RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a...

CVE-2026-10574

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT or MQPUT1 operations with malformed message handle properties...

emacs: Emacs: arbitrary code execution in Flymake mode

A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code...

Important: Red Hat Security Advisory: emacs security update

An update for emacs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

CVE-2025-64512

CVE-2025-64512 Arbitrary Code Execution in pdfminer.six via Crafted PDF Input PoC based on https://github.com/pdfminer/pdfminer.six/security/advisories/GHSA-wf5f-4jwr-ppcp % python3 mkpickle.py Usage: mkpickle.py output Ex: mkpickle.py 'curl IP:PORT/rce' evil.pickle.gz % python3 mkpdf.py -h usage...

CVE-2022-20186_CTXZ

Exploit for CVE-2022-20186 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in January 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

CVE-2026-10572

IBM MQ is susceptible to a heap buffer overflow vulnerability during the processing of MQPUT operations involving malformed message options. An authenticated attacker could leverage this flaw to cause a denial of service or potentially execute arbitrary code . No specific exploit information or r...

CVE-2026-10572 IBM MQ Buffer Overflow

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT operations with malformed message options...

CVE-2026-10574

A heap buffer overflow vulnerability exists in IBM MQ . An authenticated attacker could exploit this by processing MQPUT or MQPUT1 operations with malformed message handle properties . Successful exploitation could result in a denial of service (DoS) or the potential execution of arbitrary code ....

EUVD-2026-104475

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT or MQPUT1 operations with malformed message handle properties...

CVE-2026-10574 IBM MQ Buffer Overflow

IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when processing MQPUT or MQPUT1 operations with malformed message handle properties...