CVE-2026-111161

The libADLMIDI library, versions 1.6.2 through 1.6.2.1 , is vulnerable to an off-by-one stack out-of-bounds write within the BW_MidiSequencer component. An attacker can corrupt stack memory by providing a crafted MIDI file containing a note-on message with status 0x9F and note 0x7F . The vulnerab...

EUVD-2026-102280

Game Music Emu libgme through 0.6.5 contains a global out-of-bounds read vulnerability in ClassicEmu::mutevoices that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chipflags 0x3F, opene...

CVE-2026-111153 Game Music Emu (libgme) through 0.6.5 Out-of-Bounds Read via Classic_Emu::mute_voices_

Game Music Emu libgme through 0.6.5 contains a global out-of-bounds read vulnerability in ClassicEmu::mutevoices that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chipflags 0x3F, opene...

CVE-2026-111153

The Game Music Emu (libgme) library, version 0.6.5 and earlier , is vulnerable to a global out-of-bounds read in the Classic_Emu::mute_voices_ function. The root cause is an insufficient check when processing NSF files ; if an attacker provides an NSF header with chip_flags 0x3F where the voice c...

CVE-2026-111153 Game Music Emu (libgme) through 0.6.5 Out-of-Bounds Read via Classic_Emu::mute_voices_

Game Music Emu libgme through 0.6.5 contains a global out-of-bounds read vulnerability in ClassicEmu::mutevoices that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chipflags 0x3F, opene...

CVE-2026-111153

Game Music Emu libgme through 0.6.5 contains a global out-of-bounds read vulnerability in ClassicEmu::mutevoices that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chipflags 0x3F, opene...

CVE-2026-111139

The NetSurf libnsbmp library (versions through 0.1.7 ) is vulnerable to an out-of-bounds read in the bmp_decode_mask() function. By providing a crafted ICO file where the inner bitmap width is not a multiple of 8, an attacker can trigger a heap over-read that reads one byte past the image buffer....

CVE-2026-110876

AdPlug versions through 2.4 are affected by an out-of-bounds read vulnerability in the src/xsm.cpp file. The root cause is the processing of a negative note index , which allows reading before the note_table. Specifically, an attacker can craft an XSM file featuring the ofTAZ! signature and a son...

c2finder

c2finder Mandatory disclaimer: I am not a master coder by any means, so this is a very simple script. Do not rely on this to be perfect. I am open to feedback or ideas for improvements, though : Description This script downloads the master C&C list from Bambanek Consulting...

CVE-2026-29597

CVE-2026-29597: Improper access control DDSN Interactive cm3 Acora CMS version 10.7.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive configuration files by force browsing the “/Admin/filemanager/filedetails.asp” endpoint and manipulating the “fil...

Ashwesker-CVE-2026-21509

🛡️ CVE-2026-21509 — Microsoft Office Zero-Day Status: Actively exploited → Emergency patch released Severity: 🔴 High Risk Type: Security Feature Bypass 🔍 What is it? CVE-2026-21509 is a serious vulnerability in Microsoft Office that allows attackers to bypass built-in security protections by...

cve-2024-4406-xiaomi13pro-exploit-files

cve-2024-4406-xiaomi13pro-exploit-files Files related to the Pwn2Own Toronto 2023 exploit against the Xiaomi 13 Pro...

CVE-2025-62727-Demo

CVE-2025-62727 Demo Victim Description The target victim of CVE-2025-62727 is a simple FastAPI app that: Serves Hello World at /. Serves static files under /static using Starlette's StaticFiles. Auto-generates text files containing A repeated N times for N in 1024, 2048, 50176 on startup. How to...

CVE-2021-4034

CVE-2021-4034 BASH file, no download capabilties? Copy and paste it!...

CVE-2026-23907

Apache PDFBox Path Traversal Vulnerability Vulnerability Summary Description Apache PDFBox's ExtractEmbeddedFiles example code does not sanitize filenames when extracting embedded files from PDFs. An attacker can embed files with path traversal sequences ../ to write files to arbitrary filesystem...

cpanel-cve-2026-41940-ioc

CVE-2026-41940 IOC Scanner Detection script for the cPanel/WHM authentication bypass CVE-2026-41940 affecting all cPanel versions after 11.40. This is a rewrite of the upstream cPanel detection script with fixes for false positives and added log correlation. What it does Scans...

CVE-2024-20767-Adobe-ColdFusion

CVE-2024-20767-Adobe-ColdFusion Adobe ColdFusion is a rapid development platform for building and deploying web and mobile applications. CVE-2024-20767 - ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that could lead to arbitrary file syst...

CVE-2026-111093

In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary files...

hassh

"HASSH" - a Profiling Method for SSH Clients and Servers. NOTE: This Corelight repository was created so that it can be actively maintained, as per a request from Salesforce whose original repository is not being maintained. "HASSH" is a network fingerprinting standard which can be used to identi...

CVE-2023-22809-automated-python-exploits

CVE-2023-22809-automated-python-exploits automatically exploit the sudoedit vulnerability fo CVE-2023-22809 For guide use the following link https://medium.com/@spydomain1/cve-2023-22809-f36a2b3804b3 CVE-2023-22809 Automated Exploit - Python Script 📌 Description This Python script automates the...