18307 matches found
EUVD-2026-85166
A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writable directory during high-privilege operations. A local attacker could exploit this issue to execute code with elevated privileges...
hka-seminar-log4shell
Seminar Paper - Log4Shell Vulnerability Demonstration CVE-2021-44228 Security Notice This repository is intended exclusively for educational and demonstration purposes as part of a security-related seminar paper. Do not use this code in production environments or against systems without explicit...
The vulnerability of the printing control software in PaperCut MF and PaperCut NG, related to insecure dynamic class loading, allows a violator to execute arbitrary code.
The vulnerability of printing control software in PaperCut MF and PaperCut NG lies in the unsafe dynamic loading of classes, due to the lack of checks to ensure that the loaded classes comply with the list of allowed drivers. Exploiting this vulnerability allows a remote attacker to execute...
The vulnerability of the `NioPathHelper.deserialize` method in the Jackson-Databind library allows a hacker to load arbitrary files.
The vulnerability of the NioPathHelper.deserialize method in the Jackson-Databind library is related to insecure dynamic class loading. Exploiting this vulnerability could allow an attacker to load arbitrary files...
DocViewerExploitApp
DocViewerExploit App - CVE-2021-40724 This is the source code to exploiting the Document Viewer by MobileHackingLab. About the Vulnerable App This is an exploit app for the MobileHackingLab DocumentViewer Abdroid App Dynamic Code Loading RCE challenge. This challenge emulates CVE-2021-40724...
GraphQLer
The only dependency-aware GraphQL API testing tool! GraphQLer is a cutting-edge tool designed to dynamically test GraphQL APIs with a focus on adaptability. It offers a range of sophisticated features that streamline the testing process and ensure robust analysis of GraphQL APIs. GraphQLer...
CVE-2026-95818
A flaw was found in glibc, the GNU C Library. A local attacker can exploit a stack-based buffer overflow in the dynamic loader ld.so when a setuid/setgid ATSECURE program's DTRPATH or DTRUNPATH begins with $ORIGIN followed by a null character or a slash. This vulnerability allows the attacker to...
CVE-2026-95818
A stack-based buffer overflow in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid ATSECURE programs. When such a program's DTRPATH or DTRUNPATH begins with $ORIGIN and is followed by NUL or '/' t...
CVE-2022-0543
CVE-2022-0543 - Redis Lua Sandbox Escape Remote Code Execution Debian/Ubuntu CVE-2022-0543 is a critical security vulnerability affecting Redis on Debian-based Linux distributions including Debian and Ubuntu. It is caused by a packaging flaw that leads to a Lua sandbox escape , which can result i...
CVE-2023-32571-POC
Dynamic Linq injection to RCE - CVE-2023-32571 About Dynamic Linq injection to RCE CVE-2023-32571 Recently, members of the NCC Group discovered a vulnerability in Dynamic Linq that allows attackers to call C functions through a Linq Injection, thus making it possible to obtain RCE. Even with the...
Langflow-CVE-2025-3248-Multi-target
⚠️ Langflow RCE Exploit Scanner CVE-2025-3248 This Python-based scanner automates the detection of unauthenticated Remote Code Execution RCE vulnerabilities in Langflow instances via CVE-2025-3248. It uses a proof-of-concept payload that abuses the /api/v1/validate/code endpoint to execute...
VMUnprotect.Dumper
VMUnprotect.Dumper VMUnprotect.Dumper is a project engaged in hunting tampered VMProtect assemblies. It makes use of AsmResolver to dynamically unpack VMP protected assembly. Works on VMProtect 3.7.0 Latest and few versions back. Before usage of VMUnprotect.Dumper After usage of VMUnprotect.Dumpe...
ROS-20260922-73-0009
The vulnerability in gstreamer1-plugins-bad-free is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260922-73-0110
The vulnerability in the 389-ds-base is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260922-73-0112
The vulnerability in the 389-ds-base is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260922-73-0001
The vulnerability in gstreamer1-plugins-good is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260922-73-0003
The vulnerability in gstreamer1-plugins-good is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
dnspython
dnspython はじめに dnspython は Python 用の DNS ツールキットです。ほぼすべてのレコードタイプをサポートしています。クエリ、ゾーン転送、動的更新に使用できます。TSIG 認証されたメッセージと EDNS0 をサポートしています。 dnspython は DNS への高レベルおよび低レベルの両方のアクセスを提供します。高レベルのクラスは、指定された名前、タイプ、クラスのデータに対するクエリを実行し、アンサーセットを返します。低レベルのクラスでは、DNS ゾーン、メッセージ、名前、レコードを直接操作できます。 dnspython のモジュール名は dns...
ROS-20260921-73-0017
The vulnerability in perl-Net-DNS is related to the failure to eliminate instructions in the dynamically executed code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
