918509 matches found
CVE-2026-58257 GRR vulnerable to Arbitrary File Read and Deletion
GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or delete arbitrary files on the server,...
CVE-2026-58257
The GRR resource management and reservation application is vulnerable to Arbitrary File Read and Deletion prior to version 4.5.0 . The root cause is a failure to validate or enforce file paths within the database restoration feature . An attacker with administrator privileges can manipulate input...
TimeException
Disclaimer This tool is provided for educational purposes only. Any actions and activities related to the material contained within this repository are solely your responsibility. Misusing this tool can result in criminal charges against the persons in question. The author will not be held...
CVE-2026-59827
Authorized Metabase CVE-2026-59827 Penetration Testing Tool An authorized security assessment utility for validating the presence of CVE-2026-59827 in Metabase deployments during approved penetration testing engagements. This tool is designed to demonstrate the existence of the vulnerability whil...
CVE-2017-10661_POC
This repository does not have a README...
CVE-2017-0213
CVE-2017-0213: Windows COM Elevation of Privilege Vulnerability Description Author: Google Security Research CVE: 2017-0213 EDB-ID: 42020 References: Project-Zero Microsoft Exploit-Database Video: Youtube Affected Products Product| Version| Update| Build| Tested ---|---|---|---|--- Windows 10|...
cve-2021-3449
CVE-2021-3449 OpenSSL This issue was reported to OpenSSL on 17th March 2021 by Nokia. The fix was developed by Peter Kästle and Samuel Sapalski from Nokia. Mitigation The only known fix is to update libssl1.1. Even though some applications use hardened TLS configurations by default that disable T...
CVE-2018-4407-IOS
CVE-2018-4407-IOS CVE ? Common Vulnerabilities and Exposures TLDR The vulnerability is a heap buffer overflow in the networking code in the XNU operating system kernel. XNU is used by both iOS and macOS, which is why iPhones, iPads, and Macbooks are all affected. My exploit PoC just overwrites th...
POC-CVE-2022-44268
POC-CVE-2022-44268...
CVE-2023-25690-POC
CVE 2023 25690 - Proof of Concept Published: 7 March 2023 Base score| Confidentiality| Integrity impact| Availability impact ---|---|---|--- 9.8| High| High| High Table of contents Advisory Description Vulnerable Apache Configuration Breakdown Data Flow Lab Setup HTTP Request Splitting causing HT...
SniperRoost
SniperRoost used to generate a valid attack chain to exploit CVE-2017-11774 tied to iranian apt only reasearch poc dont use for harm please...
CVE-2024-4323-Exploit-POC
CVE-2024-4323-Exploit-POC This proof-of-concept script demonstrates how to exploit CVE-2024-4323, a memory corruption vulnerability in Fluent Bit, enabling remote code execution. CVE-2024-4323 is a memory corruption vulnerability in Fluent Bit versions 2.0.7 through 3.0.3. The issue resides in th...
CVE-2026-33317
CVE-2026-33317 OP-TEE PKCS11 PoC This repository contains the Normal World proof of concept, reproduction notes, and captured logs for CVE-2026-33317 / GHSA-8cqw-mg7v-c9p9. The official OP-TEE advisory describes missing validation in entrygetattributevalue for PKCS11CMDGETATTRIBUTEVALUE. The bug...
CVE-2026-73633
CVE-2026-73633 Apache Struts S2-072 — PoC + Environment Principle: It comes from the JSON population of the server-side enabled JSON body plugin "JSON population" is a core feature provided by the JSON plugin in Struts 2, which can be simply understood as an automatic data conversion mechanism...
CVE-2025-24893-PoC
Disclaimer: The vulnerabilities and reproduction steps described in this document are intended solely for cybersecurity research and educational purposes. No one shall use the information provided in this document for illegal purposes or unauthorized system testing. The author assumes no...
TP-Link-WDR-Router-Command-injection_POC
This repository does not have a README...
log4j
CVE-2021-44228 a.k.a. LOG4J This is a public repository from Wortell containing information, links, files and other items related to vulnerabilities related to Log4j Due to vulnerabilities in log4j 2.17.0 it is now recommended to patch to version 2.17.1 Knows CVEs CVE| Score| Description...
CVE-2025-51529
CVE-2025-51529: WordPress Cookies and Content Security Policy Plugin DoS Vulnerability Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attackers to cause a denial of service database server...
[SECURITY] [DLA 4865-1] bind9 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4865-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès October 27, 2026 https://wiki.debian.org/LTS -...