59007 matches found
CVE-2026-110239
The Rapyd Admin software versions prior to 9.20.0 is vulnerable to a stored cross-site scripting (XSS) flaw within the x-rpd::rich-text Blade component. The root cause is the component's failure to sanitize bound model values, which are instead output as raw HTML. An authenticated user can exploi...
CVE-2026-109740
A flaw was found in Firefox. Incorrect boundary condition handling in the Win32 widget component allows an attacker to escape the browser's restricted sandbox environment. An attacker who has compromised a sandboxed content process could exploit this vulnerability to achieve privilege escalation...
CVE-2026-110249
The Thunderbird email client is vulnerable to a Denial of Service (DoS) attack via its Exchange email component . A malicious, compromised, or MITM-controlled Exchange server can return a crafted SOAP response containing an element with an excessive number of attributes. This causes Thunderbird's...
langflow-CVE-2026-17633-PoC
CVE-2026-17633 & CVE-2026-17632 — IBM Langflow OSS RCE For educational purposes only. Only use against systems you own or have explicit written authorization to test. 1. Introduction What is Langflow Langflow is an open-source low-code platform for building LLM-powered applications and AI agent...
Elasticsearch-CVE-2023-31419
Elasticsearch CVE 2023-31419 PoC...
samsung-bixby-command-execution-cve-2026-21055-improper-component-export
CVE-2026-21055 PoC — Samsung Bixby Improper Component Export Proof of Concept for CVE-2026-21055 : Improper export of Android application components in Samsung Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege. Overview This repository...
Windows Search Service Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Windows Imaging Component Information Disclosure Vulnerability
Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally...
Microsoft Office Graphics Elevation of Privilege Vulnerability
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Graphics Component Elevation of Privilege Vulnerability
Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Windows Search Service Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
Microsoft Windows Search Component Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...