CVE-2026-54984

CVE-2026-54984 Windows ICC file parsing out-of-bounds write — remote code execution Reported through the Zero Day Initiative as ZDI-CAN-30441 , published as ZDI-26-543 , fixed by Microsoft in the August 2026 update cycle. Hi, I'm Kağan Çapar. I reported this vulnerability to the Zero Day...

By-Poloss..-..CVE-2026-11912

CVE-2026-11912: Simple File List eeListSettings'AllowFrontManage' != 'YES' return;...

CVE-2020-14882

Thank you NS-Sp4ce、Jas502n、s1kr10s、demon、斯文 reference： https://github.com/NS-Sp4ce/CVE-2020-14882 https://github.com/jas502n/CVE-2020-14882 https://github.com/s1kr10s/CVE-2020-14882 usage: CVE-2020-14882.py -h -u URL -f FILE -c CMD optional arguments: -h, --help show this help message and exit -u...

CVE-2022-39066

CVE-2022-39066 Firmware details: wainnerversion: BDPOSTEMF286RMODULEV1.0.0B12 crversion: CRITPOSTEMF286RV1.0.0B10 Prerequisites requests pip install requests SQL injection The vulnerability is a SQL injection present in the handler PHONEBLOCKADD in the webserver goahead binary. Possible exploits:...

php-5.4-cve-2026-php2shell-patch

php-5.4-cve-2026-php2shell-patch Patch for old php 5.4.23 version from CVE-2026-109618 и CVE-2026-109619 vulnerabilities OOM Vulnerability Mitigation This repository contains a custom .patch file for PHP 5.4.23 to fix the critical PHP2Shell Out-of-Memory OOM vulnerability CVE-2026-109618 /...

CVE-2019-17662

CVE-2019-17662 Python implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit Based on the original EDB PoC by Nikhith Tumamlapalli EDB ID: 47519 Original PoC exploit does not work due to path normalisation in the Python Requests library. The code in...

CVE-2020-25042-PoC

CVE-2020-25042-PoC Proof-of-concept for CVE-2020-25042, an authenticated arbitrary file upload issue in Mara CMS 7.5 that can lead to remote code execution. The script logs in with a valid Mara CMS admin/manager account, uploads a PHP payload through codebase/handler.php, and executes commands...

CVE-2023-0386_POC

Team CVE-MD This repository provides a proof of concept for CVE-2023-0386: https://nvd.nist.gov/vuln/detail/CVE-2023-0386 Team members: Bǎnicǎ Dragoș-Marius and Borsos Matheas-Roland Here is the video: https://www.youtube.com/watch?v=Ikux1rjIYP0 CVE-2023-0386 — Linux OverlayFS Local Privilege...

npm-tar-path-traversal-scanner

CVE-2026-31802 — npm tar Path Traversal Scanner Detects npm packages vulnerable to CVE-2026-31802 , a path traversal vulnerability in the tar npm package that allows arbitrary file writes during archive extraction. Features Scans package-lock.json for vulnerable tar versions Checks nodemodules fo...

CVE-2025-2502

Discovered by chance while learning about local privilege escalation. In any version of Lenovo PC Manager, the tools in Lenovo PC Manager have permission flaws. Any downloaded tool grants ordinary users F full control permissions. Since tools in all versions have permission issues, ordinary users...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-46078 Exploit Title: Vehicle Service Management System - 'Multiple' File upload Leads to Stored Cross-Site Scripting Exploit Author: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIUM References:...

YARA_Rules

Yara Rules BY MALGAMY This project contains a collection of Yara rules that can be used to identify and classify various types of files. Table of Contents Overview Installation Usage Contributing Overview Yara is a tool that allows users to create their own rules for identifying and classifying...

CVE-2021-41773

CVE-2021-41773 apache version 2.4.49 simaple poc How use scipt chmod +x apache.sh ./apache.sh exmaple ./apache.sh http://127.0.0.1 etc/passwd...

CVE-2024-29404_Razer

CVE-2024-29404 Razer Synapse 3 =Synapse Version 3.9.131.20813 App Version =20240213 "Chroma Effects" functionality Elevation of Privilege Vulnerability via Arbitrary File/Folder Removal https://github.com/user-attachments/assets/6528f166-5514-4b10-b1a4-3644ec11e772...

Check-Point_poc

Check-Pointpoc Check-Point Security Gateway Arbitrary File Read Vulnerability CVE-2024-24919 python Check-Pointpoc.py -h -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--'...

CVE-2026-9335-keras-hdf5-externallink

CVE-2026-9335 — Keras HDF5 ExternalLink local file-content disclosure Two public Keras APIs — keras.saving.KerasFileEditor and keras.saving.loadweights / model.loadweights — read HDF5 group members by direct indexing without a link-type check. h5py auto-dereferences ExternalLink / SoftLink on...

CVE-2021-40870

CVE-2021-40870 Unrestricted upload of file with dangerous type in Aviatrix allows an authenticated user to execute arbitrary code https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...

Grafana-CVE-2021-43798Exp

Grafana V8. Arbitrary File Read Exp -- Multi-threaded Batch Verification Script Vulnerability Description Grafana is an open-source metrics analysis and visualization suite. It is often used as a visualization tool for time series data and application analysis of infrastructure, and is also widel...

CVE-2023-2255

CVE-2023-2255 CVE-2023-2255 RCE & load of external ressources found by @Icare1337 https://nvd.nist.gov/vuln/detail/CVE-2023-2255 Exploit Just an example to drop a webshell in current directory. python3 CVE-2023-2255.py --cmd 'wget...

CVE-2024-5932

This post is a research article published by EQSTLab. ❗❗ IMPORTANT ❗❗ There are currently fake PoC github repositories running xmrig. Check out the link below for more information : URL1: https://x.com/win3zz/status/1828704644987511107 URL2: https://x.com/bornunique911/status/1828712791844524453...