232331 matches found
Exploit for Use After Free in Microsoft
CVE-2026-42978-PoC-Research CVE-2026-4...
CVE-2026-89696 nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref
In the Linux kernel, the following vulnerability has been resolved: nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref When CONFIGNFSDV42INTERSSC is enabled, nfsd4putfh can return success with fhdentry and fhexport both NULL if fhverify returns nfserrstale and putfh-noverify is...
PSAITO
PSAITO PS5 WebKit userland entry point with an integrated pay...
Exploit for CVE-2026-85612
CVE-2026-85612 CVE-2026-85612https://vulners.com/cve/CVE-20...
Metasploit Wrap Up: This One Goes to Sixteen!
This One Goes to Sixteen! Another banger from Metasploit with sixteen new modules, including ten exploit modules, with five on the CISA KEV list. Cisco, Papercut, Sonicwall, Jetbrains, and Langflow all have exploit modules, and not to be outdone, we even have a Metasploit scanner to watch the...
CVE-Project
CVE-Project CISA KEV vulnerability PoC collection — 393 CVEs...
Fedora 45 : mingw-openexr (2026-94344a87fb)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-94344a87fb advisory. Update to openexr 3.4.15 resp 3.3.14. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
patchExploitPocGenerator
patchExploitP...
Exploit for CVE-2024-37890
OMGKILLER Ав...
BlueMoon exploit kit turns Chrome and Windows flaws into attacks
BlueMoon, a shared Chrome and Windows exploit kit, shows why “patch later” is becoming a dangerous gamble. Security updates are easy to put off. The browser still opens, Windows still works, and choosing to relaunch your browser or restart your computer later can feel harmless. But a newly...
CVE-2026-85217 Man-in-the-Middle (MITM) Vulnerability in Autodesk Fusion Desktop
A maliciously crafted add-in, when installed and executed in Autodesk Fusion Desktop, can modify persistent network proxy settings without user notification or consent. A successful exploit may allow an attacker to redirect authenticated Fusion network traffic through an attacker-controlled proxy...
AIs Compress Exploit Timeline
Give an AI agent a mere rumor of an exploit, and it's enough for them to find it. What's worse, I found I could use my own agents to find the exploit just by knowing roughly what it was about and so could have been exploiting it well before the public patch was available! Given that just the rumo...
Exploit for CVE-2026-73786
CVE-2026-73786 Mi...
Exploit for CVE-2026-28496
CVE-2026-27604 + CVE-2026-28496 — FOSSBilling Pre-Auth RCE Cha...
Exploit for Unrestricted Upload of File with Dangerous Type in Drupal
Stack/Builder Builder for stack middlewares based on HttpKern...
exploitcraft
exploitcraft Exploit development framework - vuln-binary buil...
AZL-100911 CVE-2026-87933 affecting package ceph 18.2.2-12
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtilsMergePatch of the file cJSONUtils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to...
EUVD-2026-75211
A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this issue is some unknown functionality of the file includes/DBOperation.php of the component List Handler. This manipulation of the argument...
EUVD-2026-75182
A vulnerability was identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is the function updaterecord of the file includes/manage.php. The manipulation of the argument updatecategory/cid/updatebrand/updateproduct leads to sql injection. The...
CVE-2026-87933
A vulnerability was found in DaveGamble cJSON up to 1.7.19. The affected element is the function cJSONUtilsMergePatch of the file cJSONUtils.c. The manipulation results in use after free. The attack may be launched remotely. The exploit has been made public and could be used. The pull request to...