CVE-2025-25257-Exploit-Tool

CVE-2025-25257 Exploit Tool Credits Based on watchTowr Labs, 0xbigshaq, and pwner.gg analyses. Warnings For educational purposes only. Use on authorized systems. Modifies database/filesystem. Enhanced Python tool for detecting and exploiting CVE-2025-25257 Pre-Auth SQLi to RCE in Fortinet FortiWe...

CVE-2026-104065

Scribus versions prior to 1.6.7 are vulnerable to a Heap Out-of-Bounds Write in the importdrw Micrografx Draw plugin. The root cause is an unvalidated y offset used during the selection of image scanlines. An attacker can craft a malicious DRW file that, when imported by a user, writes decoded bi...

CVE-2026-104065 Scribus before 1.6.7 Heap Out-of-Bounds Write via Micrografx Draw Import

Scribus before 1.6.7 contains an out-of-bounds write vulnerability in the importdrw Micrografx Draw plugin that uses an unvalidated y offset to select image scanlines. Attackers can craft a DRW file that, when imported by a user, writes decoded bitmap data outside the heap image buffer, causing...

CVE-2026-104064

Scribus versions prior to 1.6.7 are vulnerable to a heap overflow caused by an integer overflow in the scimgdataloader_tiff TIFF loader. An attacker can trigger this by providing a crafted tiled TIFF file with excessively large tile width, height, and sample values for a user to import. This memo...

EUVD-2026-114100

Scribus before 1.6.7 contains an integer overflow vulnerability in the scimgdataloadertiff TIFF loader that allows attackers to trigger a heap overflow via crafted tile dimensions. Attackers can supply a tiled TIFF with large tile width, height and sample values for a user to import, corrupting...

CVE-2026-104064 Scribus before 1.6.7 Heap Overflow via TIFF Tile Buffer Handling

Scribus before 1.6.7 contains an integer overflow vulnerability in the scimgdataloadertiff TIFF loader that allows attackers to trigger a heap overflow via crafted tile dimensions. Attackers can supply a tiled TIFF with large tile width, height and sample values for a user to import, corrupting...

CVE-2026-104061 Scribus before 1.6.7 Heap Out-of-Bounds Write via PSD Image Loader

Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloaderpsd loader that uses unchecked PSD file values as lookup array indexes. Attackers can convince users to place or import a crafted PSD file to corrupt heap memory, causing crashes and potentially code...

CVE-2026-104062 Scribus before 1.6.7 Heap Buffer Overflow via PICT Pixmap Loader

Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can craft a PICT file whose bytesPerLine exceeds the QImage scanline size, so placing ...

EUVD-2026-114098

Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can craft a PICT file whose bytesPerLine exceeds the QImage scanline size, so placing ...

CVE-2026-104062

Scribus versions prior to 1.6.7 are vulnerable to a heap buffer overflow within the PICT image loader and import plugin. The root cause is an unchecked bytesPerLine value ; if an attacker crafts a PICT file where this value exceeds the QImage scanline size , it can result in heap memory corruptio...

CVE-2026-104061

Scribus versions before 1.6.7 are vulnerable to a heap out-of-bounds write within the scimgdataloader_psd loader. The vulnerability is caused by the application using unchecked values from a PSD file as lookup array indexes. An attacker can exploit this by convincing a user to import or place a c...

CVE-2026-104061 Scribus before 1.6.7 Heap Out-of-Bounds Write via PSD Image Loader

Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloaderpsd loader that uses unchecked PSD file values as lookup array indexes. Attackers can convince users to place or import a crafted PSD file to corrupt heap memory, causing crashes and potentially code...

CVE-2026-104062 Scribus before 1.6.7 Heap Buffer Overflow via PICT Pixmap Loader

Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can craft a PICT file whose bytesPerLine exceeds the QImage scanline size, so placing ...

EUVD-2026-114097

Scribus before 1.6.7 contains a heap out-of-bounds write vulnerability in the scimgdataloaderpsd loader that uses unchecked PSD file values as lookup array indexes. Attackers can convince users to place or import a crafted PSD file to corrupt heap memory, causing crashes and potentially code...

CVE-2026-104062 Scribus before 1.6.7 Heap Buffer Overflow via PICT Pixmap Loader

Scribus before 1.6.7 contains a heap buffer overflow vulnerability in the PICT image loader and import plugin that allows attackers to corrupt heap memory by supplying an unchecked bytesPerLine value. Attackers can craft a PICT file whose bytesPerLine exceeds the QImage scanline size, so placing ...

CVE_2022_46395_Raven

Exploit for CVE-2022-46395 to run on FireTV 2nd gen Cube This is a fork of security researcher Man Yue Mo's Pixel 6 POC for CVE-2022-46395. Read his detailed write-up of the vulnerability here. Changes have been made to account for FireOS's 32-bit user space. The POC exploits a bug in the ARM Mal...

CVE-2024-3400-

PAN-OS Firewall Command Injection Vulnerability This repository contains a Go script that exploits a Command Injection vulnerability in firewalls running Palo Alto Networks' PAN-OS operating system. The vulnerability, identified as CVE-2024-3400, allows an unauthenticated attacker to execute...

CVE-2017-11882-exp

CVE-2017-11882 43b original script from https://github.com/embedi/CVE-2017-11882 109b original script from https://github.com/unamer/CVE-2017-11882/ salute, now unamer's code can execute shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...

CVE-2026-119479

The Crocoblock JetFormBuilder WordPress plugin (versions up to and including 3.6.7.1 ) is vulnerable to a Content Injection vulnerability. The root cause is the Improper Neutralization of Script-Related HTML Tags in a web page, leading to Basic XSS . This flaw allows for code injection within the...

CVE-2026-119479 WordPress JetFormBuilder plugin <= 3.6.7.1 - Content Injection vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Code Injection.This issue affects JetFormBuilder: from n/a through 3.6.7.1...