CVE-2026-14431

CVE-2026-14431 Bug fix https://chromium-review.googlesource.com/c/v8/v8/+/7950517 maglev Check map of inlined array in ArrayIteratorPrototypeNext Fixed: 523884658 Change-Id: I2a2bba817952d7023eb4b97ad41d8bb460fb9359 Reviewed-on: https://chromium-review.googlesource.com/c/v8/v8/+/7950517...

codeql-sample-polkit

-- coding: utf-8 - - The polkit pkexec bug Overview This repository examines the polkit pkexec bug using CodeQL. It has instructions for building the databases the resultant databases a sequence of queries illustrating an approach to find this bug These are done: the polkit source / database buil...

CVE-2020-0674

CVE-2020-0674 CVE-2020-0674 is a use-after-free vulnerability in the legacy jscript engine. It can be triggered in Internet Explorer. The exploit here is written by maxpl0it but the vulnerability itself was discovered by Qihoo 360 being used in the wild. This exploit simply pops calc. Exploit...

CVE-2019-8601

Exploiting CVE-2019-8601 This is an exploit for a WebKit vulnerability that was originally discovered by Fluoroacetate during the pwn2own competition in Vancouver. While I did not discover this bug, I wrote this exploit to practice my exploit development skills. The original writeup for this...

CVE-2022-24999

CVE-2022-24999 This repository contain exploits samples of the vulnerability we found in the JS library "qs" in december 2021. This vulnerability was fixed in express v4.17.3 & qs v6.10.3 v6.9.7, v6.8.3, v6.7.3, v6.6.1, v6.5.3, v6.4.1, v6.3.3, and v6.2.4. qs Array & String Bombs Vulnerable versio...

CLEANSTART-2024-XU26576 inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status

Security vulnerability affects the xen package. inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status...

CVE-2020-15999

CVE-2020-15999 Here you will all the resources in order to execute the PoC for the CVE-2020-15999 in Google Chrome and Ftview Ubuntu. There are two folders in this repository, one for each program. Google Chrome In order to reproduce the exploit you will have to install a Google Chrome version...

CLEANSTART-2024-VR68755 Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5

Security vulnerability affects the radare2 package. Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5...

CLEANSTART-2025-ZS44412 out-of-bounds array read in the apr_time_exp*() functions was fixed in the Apache Portable Runtime 1

Security vulnerability affects the apr package. An out-of-bounds array read in the aprtimeexp functions was fixed in the Apache Portable Runtime 1...

CLEANSTART-2025-GY66443 malformed input file can lead to a segfault due to an out of bounds array access in raptor_xml_writer_start_element_common

Security vulnerability affects the raptor2 package. A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon...

CVE-2024-1874

CVE-2024-1874 Proof Of Concept for CVE-2024-1874 Command Injection via Array-ish $command Parameter of procopen bypass CVE-2024-1874 fix The CVE: In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailin...

numpy-1.13.1

Travis CI Status --- NumPy is the fundamental package needed for scientific computing with Python. This package contains: a powerful N-dimensional array object sophisticated broadcasting functions tools for integrating C/C++ and Fortran code useful linear algebra, Fourier transform, and random...

CLEANSTART-2024-TM53747 type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array

Security vulnerability affects the firefox-esr package. A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array...

CLEANSTART-2024-RW79191 By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resized during script execution

CVE-2020-6806 affects multiple packages. By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resized during script execution. See references for individual vulnerability details...

CVE-2014-1773

CClipStack::PushClipRect Invalid Array Indexing First, starting with the callstack from the crash with pageheap enabled: ChildEBP RetAddr 0919aac8 6b58459f MSHTML!CWorldTransform::IsAxisAligned 0919ab40 6ba228e9 MSHTML!CDispSurface::CClipStack::PushClipRect+0x1a2 0919aba4 6be25b58...

GitLab-CVE-2023-7028

GitLab CVE-2023-7028 — Mock 16.6.0 Host-only CVE-2023-7028 CVSS 10.0: POST /users/password accepted useremail array — server found user by email0 but sent the same reset token to every address → attacker with [email protected] hijacks [email protected]. Affected: GitLab CE/EE 16.5.6,...

CLEANSTART-2024-MY31575 If array shift operations are not used, the Garbage Collector may have become confused about valid objects

Security vulnerability affects the firefox package. If array shift operations are not used, the Garbage Collector may have become confused about valid objects...

AdminNeo: version-cache array injection causes persistent denial of service

Summary AdminNeo v5.4.1 gets the latest version from GitHub API in a browser JavaScript function. Version number is then sent by POST request to ?script=version. This endpoint lacks origin validation and accepts POST data from any source. An attacker can POST version parameter which PHP converts ...

GHSA-JM85-8CPP-9CJC AdminNeo: version-cache array injection causes persistent denial of service

Summary AdminNeo v5.4.1 gets the latest version from GitHub API in a browser JavaScript function. Version number is then sent by POST request to ?script=version. This endpoint lacks origin validation and accepts POST data from any source. An attacker can POST version parameter which PHP converts ...

CVE-2026-59978 AdminNeo: version-cache array injection causes persistent denial of service

AdminNeo is a full-featured database management tool written in PHP. From 4.6.2 until 5.5.0, the unauthenticated ?script=version endpoint accepts POST data without origin, CSRF or parameter-type validation. A version parameter becomes a PHP array that bootstrap.inc.php serializes into the shared...