Realtek RTL8762C Information Disclosure

The vulnerability of the embedded energy-independent single-write eFUSE memory in the highly integrated wireless system on chip SoC Realtek RTL8762C is related to the fact that power is turned on before the access control mechanism is activated. Exploiting this vulnerability can allow a hacker to...

optionsbleed

optionsbleed This is a proof of concept code to test for the Optionsbleed bug in Apache httpd CVE-2017-9798. Please consider using the tool Snallygaster instead, it has a check for optionsbleed included: snallygaster -t optionsbleed host usage optionsbleed -h -n N -a -u hosttocheck Check for the...

CVE-2024-50848

CVE-2024-50848: XXE in the WorldServer v11.8.2 An XML External Entity XXE vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 might lead to access sensitive system information and execute arbitrary commands via supplying a crafted .tmx file. To...

WordPress Metform <=2.1.3 - Information Disclosure

WordPress Metform plugin through 2.1.3 is susceptible to information disclosure due to improper access control in the /core/forms/action.php file. An attacker can view all API keys and secrets of integrated third-party APIs such as that of PayPal, Stripe, Mailchimp, Hubspot, HelpScout, reCAPTCHA...

Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection

Alt-n/MDaemon Security Gateway through 8.5.0 is susceptible to XML injection via SecurityGateway.dll?view=login. An attacker can inject an arbitrary XML argument by adding a new parameter in the HTTP request URL. As a result, the XML parser fails the validation process and discloses information...

CVE-2018-1313

This repository does not have a README...

CVE-2026-112394

The Pillow Python imaging library (versions prior to 13.0.0 ) contains a buffer over-read vulnerability in the P;2L and P;4L raw decoders. The root cause is that ImagingRawDecode calculates a packed-pixel row size while unpackers read separately padded bit planes; a caller can provide image dimen...

EUVD-2026-104604

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row size, while the unpackers read separately padded bit planes. A caller can supply a buffer and image dimensions whose...

CVE-2026-112394 Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row size, while the unpackers read separately padded bit planes. A caller can supply a buffer and image dimensions whose...

CVE-2026-112394

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's P;2L and P;4L raw decoders can read past the end of an input buffer. ImagingRawDecode calculates a packed-pixel row size, while the unpackers read separately padded bit planes. A caller can supply a buffer and image dimensions whose...

W3TotalChache

W3TotalChache Testing for CVE-2019-6715 Arbitrary File Read/ CVE-2024-12365 SSRF/Info Disclosure usage: python3 w3tcscanner.py -u https://example.com -f /etc/passwd -d 3 import requests import argparse from urllib.parse import urlparse def checkw3tcversionurl: try: response = requests.geturl,...

CVE-2026-0257

Forge a GlobalProtect auth override cookie using the public key from TLS CVE-2026-0257 A proof-of-concept script to test a target PAN-OS GlobalProtect portal or gateway for CVE-2026-0257. The script will attempt to forge a valid authentication override cookie by iterating over the certificate cha...

PixelDump_CVE-2016-8462

PixelDump - CVE-2016-8462 PixelDump CVE-2016-8462 was one of Pixel bootloader vulnerabilities found/worked out by beaups and Jon 'jcase' Sawyer. Disclaimer This is a dirty POC that was never intended to be released, I just copied another project, spent a few minutes adding a few lines, and sent i...

Microsoft Dynamics NAV Auth Bypass Info Disclosure

The vulnerability of the integrated business management system Microsoft Dynamics NAV lies in the lack of authentication for critical functions. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

ntlmscout

/ // / / / / / / / / / / / / / / / / / / / // / / / / / // // / // / / // ///// // /////,// hunting exposed NTLM BoydHacks · github.com/BoydHacks ntlmscout One tool to squeeze every drop of information out of internet-exposed NTLM endpoints. An unauthenticated NTLM negotiation leaks a...

CVE-2025-24813-PoC

CVE-2025-24813 – Proof of Concept 📖 Overview This repository contains a Proof of Concept PoC for CVE-2025-24813 , a vulnerability affecting affected software/product name here – update based on advisory. The PoC demonstrates the issue in a safe and reproducible way , to help researchers, defender...

CVE-2024-10355

Source code Petrol pump management software free download | SourceCodester Description SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, A vulnerability has been found that is rated as high risk, affecting some unknown functionality of the admin\invoice.php file,...

EUVD-2026-102289

WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in the HMP parser WMParseNewHmp that allows attackers to read beyond buffers via underflowed chunk lengths. Attackers can supply a crafted .hmp file with a chunk length of 0-12 that wraps to roughly 4 GB, crashing application...

CVE-2026-111132 GNOME libgxps through 0.3.2 Heap Out-of-Bounds Read via path_geometry_start_element

GNOME libgxps through 0.3.2 contains a heap out-of-bounds read in pathgeometrystartelement that allows attackers to read past allocations via crafted PolyBezierSegment or PolyQuadraticBezierSegment Points attributes. Attackers can supply a point count not divisible by three or two in a crafted XP...

CVE-2026-61610 Lychee: unauthenticated photo starring reveals existence of private photos when photos_star_visibility=anonymous

Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photosstarvisibility is set to anonymous, POST /api/v2/Photo::highlight can fetch and modify a photo without confirming that the caller can see it. BaseApiRequest::validateResolved invokes...