CVE-2026-109763

Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109763

A mitigation bypass exists in the File Handling component of the Firefox web browser. This vulnerability has been addressed in Firefox 158 and Firefox ESR 153.5 . No specific root cause or exploit details are provided in the documents.

CVE-2026-109760

Mitigation bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109760

A mitigation bypass exists in the Networking: HTTP component of the Firefox web browser. This vulnerability was addressed in Firefox 158 and Firefox ESR 153.5 . Specific details regarding the underlying root cause or practical consequences are not provided in the available documents. No informati...

CVE-2026-109746

A mitigation bypass exists in the DOM: Security component of the Firefox web browser. This vulnerability was addressed in Firefox 158 . No specific root cause, practical consequences, or exploit details are provided in the documents.

CVE-2026-109746

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109737

Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109737

A mitigation bypass vulnerability exists in the Enterprise Policies component of the Firefox web browser. This issue has been addressed in Firefox 158 and Firefox ESR 153.5 . While the technical root cause is not detailed in the provided documents, the vulnerability was reported by Souma Ohsawa a...

CVE-2026-109734

A mitigation bypass exists in the DOM: Security component of Firefox . This vulnerability was addressed in Firefox 158 and Firefox ESR 153.5 . The issue is reported to have a moderate impact. No specific exploit details or technical root causes are provided in the documentation beyond the compone...

CVE-2026-109734

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2020-14882-WebLogic-Analysis

Vulnerability Research: Exploitation of the CVE-2020-14882 and CVE-2020-14883 Chain in Oracle WebLogic Server The repository contains a technical report Write-up and a conceptual Proof of Concept PoC demonstrating the chained Authentication Bypass and Remote Code Execution RCE vulnerabilities in...

CVE-2026-41651

CVE-2026-41651 CVSS 3.x : 7.8 HIGH CWE : CWE-367 Time-of-Check Time-of-Use Fix : PackageKit 1.3.5+ Affects : PackageKit 1.0.2 – 1.3.4 Local privilege escalation via TOCTOU race condition in PackageKit's D-Bus transaction handler. Any unprivileged local user can install arbitrary packages as root ...

CVE-2026-24207

CVE-2026-24207 — NVIDIA Triton SageMaker Auth Bypass to Unauth RCE Unauthenticated attackers can reach the model-management surface of NVIDIA Triton Inference Server on the SageMaker and Vertex AI HTTP ports — bypassing the operator's --http-restricted-api configuration. Combined with the SageMak...

CVE-2021-34824

CVE-2021-34824 repro reproducing an old istio bug This set of scripts and manifests will aid in exploring an old Istio security issue which allowed malicious Istio users to access Kubernetes secrets they should not have access to. This reproduction is modeled on this blog post which has some...

HG532d-RCE-Exploit

HG532d RCE Exploit Overview A Remote Code Execution RCE exploit based on CVE-2017-17215 vulnerability. Modded from original PoC code from exploit-db.com to work on Huawei HG532d Home Gateway Routers. Description This RCE exploit is based on CVE-2017-17215 which exploits vulnerabilities in the UPn...

CVE-2026-49869

Kestra CVE-2026-49869 / CVE-2026-53576 Scanner Scans Kestra instances for the endsWith"/configs" authentication filter bypass. Kestra's AuthenticationFilter.java checks request.getPath.endsWith"/configs" instead of matching the exact path /api/v1/configs. Since Kestra addresses resources via...

patch-CVE-2026-11553

Patch: CVE-2026-11553 Vulnerability Details CVE : CVE-2026-11553 Product : VMware vCenter Description : Authentication bypass Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-04-28 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD CI...

Sudo-Security-Bypass-Vulnerability-CVE-2019-14287-

This repository does not have a README...

UAC-Elevation-CVE

CVE-2021-31956: Windows UAC Elevation of Privilege Exploit Overview CVE-2021-31956 is a UAC User Account Control bypass vulnerability in Windows that allows an attacker to elevate privileges to SYSTEM without triggering a UAC prompt. This CVE exploits a flaw in the way Windows handles registry ke...

watchTowr-vs-SolarWinds-WebHelpDesk-CVE-2025-40552-CVE-2025-40553

CVE-2025-40552 and CVE-2025-40553 SolarWinds Web Help Desk Pre-Auth RCE Chain SolarWinds Web Help Desk Pre-Auth RCE Chain Detection Artifact Generator Tool Description This Detection Artifact Generator verifies if SolarWinds Web Help Desk instance is vulnerable to CVE-2025-40552 and CVE-2025-4055...