67707 matches found
EUVD-2026-49356
A use-after-free UAF vulnerability was discovered in the core parsing component of SQLite 3.41. The flaw occurs because the program frees an ExprList object via sqlite3ExprListDelete and then subsequently accesses the dangling pointer of the released object. A remote adversary can supply speciall...
Linux Distros Unpatched Vulnerability : CVE-2026-17501
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the...
CVE-2026-17531: Authorization Bypass Through User-Controlled Key
A weakness has been identified in unitedbyai droidclaw up to 0.5.3. Affected by this issue is some unknown functionality of the file server/src/routes/goals.ts of the component Unsigned Scheduled Callback. This manipulation causes authorization bypass. Remote exploitation of the attack is possibl...
CVE-2026-51300
SQLite 3.41 contains a use-after-free vulnerability in the expression parsing/memory management logic. Specifically, after sqlite3ExprDelete releases an expression object, the program may still access freed memory in expr.c, allowing a remote attacker to craft malicious SQL queries that trigger i...
PT-2026-64821
Name of the Vulnerable Software and Affected Versions llama.cpp version e15efe0 Description A flaw exists in the JSON-Schema-to-GBNF Conversion component within the transform function of the common/json-schema-to-grammar.cpp file. This issue allows a remote attacker to trigger an excessive...
emp3r0r v4.8.0
emp3r0r Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents. What is emp3r0r? emp3r0r is an advanced, zero-trust post-exploitation framework and command & control C2 system designed for Linux and Windows target environments. Built from the...
ctf-writeups
CTF Writeups Writeups from authorized OffSec labs, with more...
Exploit for Missing Authentication for Critical Function in Cpanel
cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...
Exploit for Missing Authentication for Critical Function in Cpanel
cPanel-CVE-2026-41940-auth-bypass-exploit Critical authenticat...
vulnerability-exploitation-initial-access
Metasploitable2 – Vulnerability Exploitation & Initial Access...
emp3r0r v4.7.1
emp3r0r Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents. What is emp3r0r? emp3r0r is an advanced, zero-trust post-exploitation framework and command & control C2 system designed for Linux and Windows target environments. Built from the...
CVE-2026-17458
A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser/routes/agent.act.ts of the component Browser Control HTTP API. Performing a manipulation results in server-side request forgery. It is possible to initiate the attack...
CVE-2026-17459 perwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink
A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/ExternalResourceHandler.jav of the component SparkJava. Executing a manipulation can lead to symlink following. It is possib...
tri-services-exploitation-report
No d...
EUVD-2026-49048
A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file src/channels/chat-sdk-bridge.ts of the component MCP Server Approval. Performing a manipulation results in improper authorization. The attack needs to be approached...
HTB-Writeups
Hack The Box Writeups This repository contains my Hack The Bo...
RollerCoaster
RollerCoaster: Advanced Exploitation of Cisco ASA LINA Firmwar...
Linux Distros Unpatched Vulnerability : CVE-2026-47063
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported version...
emp3r0r v4.7.0
emp3r0r Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents. What is emp3r0r? emp3r0r is an advanced, zero-trust post-exploitation framework and command & control C2 system designed for Linux and Windows target environments. Built from the...