CVE-2026-78012

An issue in the NetStaX EtherNet/IP Stack prior to v5.6.1 could allow a large Class 3 explicit-message request to exceed the application-side receive buffer without generating an error or warning. The result could be memory corruption, a device crash, or a potential remote attack vector without t...

CVE-2026-84145

Internally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerabilit...

CVE-2026-84119

Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, and Firefox ESR 153.2...

CVE-2026-84144

CVE-2026-84144 covers multiple internally found bugs in Firefox 154 and Firefox ESR 153.1 . Some of these bugs showed evidence of memory corruption or another security-relevant defect, and Mozilla presumes that with enough effort some could have been exploited. The bugs were fixed in Firefox 155 ...

CVE-2026-84143

CVE-2026-84143 covers a set of internally discovered bugs in Firefox 154 , Firefox ESR 153.1 , and Firefox ESR 140.14 . Some of these bugs showed evidence of memory corruption or another security-relevant defect, and Mozilla presumes that with enough effort some could have been exploited. The fix...

CVE-2026-84142

This CVE covers internally found bugs present in Firefox 154 , where some defects showed evidence of memory corruption or other security-relevant issues. Mozilla presumes that with sufficient effort some of these bugs could have been exploited , though no confirmed exploitation is documented in t...

CVE-2026-84125 Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2...

EUVD-2026-69074

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2...

EUVD-2026-69068

Internally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerabilit...

CVE-2026-84145

Internally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerabilit...

CVE-2026-84145 Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40

Internally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerabilit...

CVE-2026-10420

Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 102d3dc75cf8e58e68e4bea54ae3c803992c91be...

SMBGhost_RCE_PoC

SMBGhostRCEPoC RCE PoC for CVE-2020-0796 "SMBGhost" For demonstration purposes only! Only use this a reference. Seriously. This has not been tested outside of my lab environment. It was written quickly and needs some work to be more reliable. Sometimes you BSOD. Using this for any purpose other...

CVE-2026-80624

A flaw was found in the Linux kernel's mfd: cs42l43 component. This vulnerability occurs because the system does not properly verify that the received firmware's size is larger than its header. An attacker could exploit this by providing a malformed firmware, leading to an out-of-bounds memory...

CVE-2026-81727

A flaw was found in NLTK. This vulnerability, a filesystem containment bypass, allows a local attacker with write access to a shared downloader directory to create special links hardlinks that point to files outside the intended installation area. When a package is extracted, these hardlinks can...

CVE-2025-21298

CVE-2025-21298 content This is a proof-of-concept for CVE-2025-21298 - Windows OLE Remote Code Execution Vulnerability CVSS 9.8. This is a memory corruption PoC , not an exploit. vulnerability The vulnerability is located in ole32.dll!UtOlePresStmToContentsStm. The purpose of the function is ti...

CVE-2026-80698

A flaw was found in the dmaengine: idxd component of the Linux kernel. This vulnerability is caused by a double free error where memory allocated for work queue wq, engine, and group structures is freed twice. This occurs because kfree is explicitly called in error handling and cleanup routines, ...

CVE-2026-42007

A flaw was found in Dovecot. An authenticated attacker can use a Sieve script with the editheader extension to trigger a use-after-free vulnerability in the mail editing code. This can lead to memory corruption, potentially crashing the mail delivery process and allowing for arbitrary code...

CVE-2025-64720-PoC

CVE-2025-64720: libpng Buffer Overflow in Palette Premultiplication Status : Patched Severity : High CVE ID : CVE-2025-64720 Discovery Date : 2025-11-XX Public Disclosure : 2025-11-21 Overview Summary An out-of-bounds read vulnerability exists in libpng's pngimagereadcomposite function when...

iCSeeU

This is a suite of tools/PoCs/exploits that can be used iCSee video-call cameras via LAN and maybe non-video call cameras as well. This could easily be used to flash alternative firmwares as a replacement for the SD card update method. Note: Any memory corruption exploit will only work if your...