918435 matches found
CVE-2026-116657
Tanium addressed a denial of service vulnerability in Enforce...
CVE-2026-116658
Tanium addressed a denial of service vulnerability in Enforce...
CVE-2026-108310
Tanium addressed a denial of service vulnerability in Tanium Server...
CVE-2021-43798-Grafana-POC
CVE-2021-43798: Grafana Arbitrary File Read Vulnerability POC Usage: python3 exp.py IP:PORT...
CVE-2024-6387-PoC
CVE-2024-6387-PoC...
CVE-2026-65628
josejwk:sharedsecret/2 exposed in Elixir as JOSE.JWK.sharedsecret/2 derives an ECDH shared secret from two JWKs. Its first function clause only matches when both JWKs carry the same key type kty module, and its fallback clause re-invokes itself as sharedsecretfromYourJWK, fromMyJWK. Because from/...
CVE-2026-65627
Improper Handling of Highly Compressed Data Data Amplification vulnerability in potatosalad jose erlang-jose allows a remote attacker to exhaust a node's memory with a small crafted JWE token. The josejwezip:uncompress/2 function in src/jwe/josejwezip.erl decompresses the DEFLATE-compressed...
CVE-2026-65631
Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion denial of service by submitting a crafted RSA JSON Web Key. When an application parses an untrusted JWK through the public josejwk:frombinary/1 or josejwk:frommap/1 API or the...
CVE-2026-57184
Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, insufficient bounds checking in the chanooh323 Q.931 information-element parser permits an out-of-bounds read that may allo...
cve-2025-29384-poc
CVE-2025-29384 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-29384 , a critical stack-based buffer overflow vulnerability discovered in the Tenda AC9 router running firmware version V15.03.05.14multi. This vulnerability allows...
bigdecimal-segfault-fix
h1. BigDecimal Segfault Fix There is a segfault bug in ruby's big decimal library which can be triggered by users providing known-bad values. If you wish to test whether your application is secure run +example.rb+. This script should exit normally, not segfault. The workaround has negative...
CVE-2017-18635
cve-2017-18635 PoC for CVE-2017-18635 Full article: Exploiting an old noVNC XSS CVE-2017-18635 in OpenStack...
CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box
CVE-2026-2796 + CVE-2026-2768 — Escape the Wasm Box Full-chain Firefox exploitation research: a WebAssembly type confusion for renderer code execution , chained toward a parent-process bug for a sandbox escape. Both bugs were fixed in Firefox 148 MFSA-2026-13; the target here is a Firefox...
CVE-2024-50251-PoC
CVE-2024-50251-PoC Just a local Dos bug in Linux kernel...
CVE-2025-9784
CVE-2025-9784 MadeYouReset HTTP/2 Vulnerability Test Overview This repository contains a simple and effective bash script to test for the CVE-2025-9784 vulnerability known as the "MadeYouReset" HTTP/2 Denial of Service DoS attack in Undertow HTTP/2 server implementations. The vulnerability allows...
SUSE CVE-2026-97631
EDK2 contains a vulnerability in BIOS where a user may cause "Out-of-bounds Write", Classic Buffer Overflow, and "Incorrect Calculation of Buffer Size" by remote access. Successful exploitation of this vulnerability can lead to arbitrary code execution. It could also impact Confidentiality,...
CVE-2018-12533
RF-14310 / CVE-2018-12533 payload generator Based on Lucifaer research All credit goes to https://github.com/Lucifaer References https://access.redhat.com/security/cve/cve-2018-12533 richfaces-jboss-poc Easy to deploy proof of concept to practice Richfaces 3.3.4 deserialization + EL injection...
ExploitDev
ExploitDev Various tools, PoCs and experiments related to my blog at https://www.forrest-orr.net/...