CVE-2025-32463

Vulnerability Overview CVE-2025-32463 affects Sudo versions 1.9.14 through 1.9.16 fixed in 1.9.17p1. When Sudo is invoked with the --chroot option, it may load configuration from an attacker-controlled path, leading to arbitrary code execution and privilege escalation to root. Usage: python3...

CoD-MW-Warzone-2---CVE-2023-38821

CoD-MW-Warzone-2 - CVE-2023-38821 DLL Planting in the CoD MW Warzone 2 - CVE-2023-38821 Discoverer: Idan Malihi Description An issue in Activision Call of Duty Modern Warfare: Warzone v.2 allows a local attacker to execute arbitrary code via a crafted file to the UMPDC.dll, MSIMG32.dll,...

CVE-2025-32432

CVE-2025-32432 Craft CMS Pre-Auth RCE PoC Critical Pre-Authentication Remote Code Execution in Craft CMS Affected: Craft CMS 3.x, 4.x, and 5.x up to 5.6.16 Info: This exploit is tested against HackTheBox Orion machine Overview This repository contains a proof-of-concept exploit for CVE-2025-32432...

CVE-2026-0303

Checkov Arbitrary Code Execution CVE-2026-0303 CVE: CVE-2026-0303 | CVSS Base: 6.3 | Severity: Low CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H CVE-2026-0303 - Arbitrary code execution vulnerability in Checkov. Published by Palo Alto Networks on September 9, 2026. Affected...

EUVD-2026-109659

SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device on the network can send specially crafted messages that cause the master to write data outside allocated memory boundaries. The software performs arithmetic on message length values without proper validation, allowin...

CVE-2026-70388

SOEM version 2.0.0 and earlier is vulnerable to memory corruption due to an integer underflow in message length validation. A malicious device on the network can send specially crafted messages that cause the software to perform arithmetic on length values without proper validation. This allows n...

CVE-2025-52122

CVE CraftCMS Freeform CraftCMS Freeform contains an SSTI vulnerability, resulting in arbitrary code injection for all users that have access to editing a form submission title. Vulnerable versions are v5.0.0 test % set form = freeform.form'pentest' % % if form % form.render % else % Form not foun...

wp2shell-Hestia-Scanner

🛡️ wp2shell-Hestia-Scanner 🇬🇧 English | 🇬🇷 Ελληνικά Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators across all hosted sites — with per-client email reports, core file diff, SHA256 webshell detection, risk scoring, and optional AI evaluation. ⚠️ Safe...

CVE-2026-107899

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::CheckSymbolMacroParam. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

CVE-2026-107900

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!CCheck::ItemCheck. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

CVE-2026-107895

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds write vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

CVE-2026-107898

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6EditData!CDataRomErrorCheck::MacroCommandCheck. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

CVE-2026-107894

V-SFT provided by FUJI ELECTRIC CO., LTD. contains a stack-based buffer overflow vulnerability. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

CVE-2026-107897

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6MemInIF!settemptypedefault. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

CVE-2026-107896

V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6ComFile!loadgritem. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...

CVE-2026-74433

A flaw was found in the Linux kernel's rxrpc component, specifically within the rxgkissuechallenge function. This Use-After-Free UAF vulnerability occurs because a memory page containing challenge content is prematurely freed before a tracepoint invocation, causing a pointer to reference freed...

Buffer Overflow

Brotli is vulnerable to Buffer Overflow. The vulnerability is due to improper bounds handling in c/dec/decode.c, where a crafted Brotli-compressed stream can corrupt adjacent decoder memory, potentially enabling sensitive information disclosure, denial of service, or arbitrary code execution by a...

CVE-2026-116124

A flaw was found in libgsf. A heap-based buffer overflow vulnerability exists in the OLE2 document parser within the oleinforeadmetabat function. A remote attacker could exploit this flaw by enticing a user to open a specially crafted file. Successful exploitation could lead to arbitrary code...

CVE-2025-48384-poc

CVE-2025-48384-poc CVE-2025-48384 takes the form of an improper link resolution link following vulnerability in git. Specifically, filenames with carriage returns are improperly parsed in .git/config, and including a symlink to point a git hook executable located in a submodule as the submodule...

CVE-2022-1388

F5-CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage bash / | | | || | / | |/ / \ / | | || || | | / /| | | || | ' / /'| |/' |' / /'' / /'| | / / \ V / \ V / | | | | | || ||| / / | /| | / / / / ||| | \ \ / \ / \ | /\ / /| | ./ /\ |/ /./ /./ / | |./ /| || || || | / / /...