Samsung-CVE-2025-21042

🔐 CVE-2025-21042 — Samsung Image Codec Remote Code Execution ⚙️ What it is A critical vulnerability in Samsung’s image-processing library libimagecodec.quram.so — used on Galaxy Android devices. 🧩 It’s an out-of-bounds write flaw triggered when parsing malicious image files like DNG. 📸 A crafted...

seal-security-nuget-demo-net7

Browser + CLI Demo NuGet/C — .NET 7 Edition Why a .NET 7 fork? This is a retargeted fork of the canonical seal-security-nuget-demo which targets net9.0. The exploit story, the controllers, and the sealed-package list are identical — only theTargetFramework differs. It exists because most enterpri...

EUVD-2026-110466

Go JOSE: Panics in JSON parsing...

EUVD-2026-110465

Go JOSE: Panic during CBC-HMAC processing...

CVE-2016-2569

Hello there, Thank you for reading my first blog entry. Today we will go with exploit creation for one of the open-source tool Squid Caching proxy server. So What Is Squido? Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response time...

graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service

Summary The regular expression behind GraphQLPhoneNumber since 1.24.1 backtracks exponentially. A string made of a run of digits followed by one character that makes the match fail for example "1".repeat30 + "x" blocks the JavaScript thread for seconds, and every additional digit doubles the time...

GHSA-X8RM-F576-GQ67 graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service

Summary The regular expression behind GraphQLPhoneNumber since 1.24.1 backtracks exponentially. A string made of a run of digits followed by one character that makes the match fail for example "1".repeat30 + "x" blocks the JavaScript thread for seconds, and every additional digit doubles the time...

npm: graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service

npm: graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service vulnerability discovered by ? in WordPress npm graphql-scalars versions = 2.0.0...

CVE-2022-0944_RCE_POC

CVE-2022-0944 Proof of concept exploit for SQLPad RCE CVE-2022-0944 leading to a RCE with a revershell to the attackers PC. Usage usage: script.py URL IP PORT positional arguments: URL URL to SQLPad IP Listener host address for reverse shell PORT Listener port for reverse shell Example: trigger...

CVE-2026-118694 python-markdown2 through 2.5.5 Denial of Service via Unclosed Inline Link Destinations

python-markdown2 through 2.5.5 contains a denial of service vulnerability that allows remote users to exhaust CPU by submitting Markdown with unclosed inline link destinations. Attackers can submit repeated 'a' or '!a' sequences, causing findbalanced to rescan the remaining document for each link...

CVE-2026-118694

The python-markdown2 library (versions through 2.5.5 ) is vulnerable to a Denial of Service (DoS) attack due to an Inefficient Algorithmic Complexity (CWE-407) flaw. A remote user can exhaust CPU resources by submitting Markdown containing repeated unclosed inline link sequences, such as [a]( or ...

CVE-2026-118689 OvenMediaEngine through 0.21.0 OVT Relay DoS via Oversized payload_length

OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader that allows unauthenticated attackers to stall connections by sending payloadlength values above 32750. Attackers can send crafted OVT packets to the OVT listener to hold connections open indefinite...

cve-2025-55182-poc-test

CVE-2025-55182 Demonstration Lab Next.js / React RSC RCE This document provides a complete and reproducible setup for demonstrating CVE-2025-55182 Remote Code Execution RCE against a vulnerable Next.js + React Server Components environment running inside a Multipass Ubuntu VM. The exploit is...

CVE-2024-44083

CVE-2024-44083 the original PoC repos got deleted github.com/Azvanzed/CVE-2024-44083, github.com/Azvanzed/IdaMeme so here it is. figured id recreate it for anyone who wants to understand how it works or test their setup. IDA Pro ≤ 8.4 crashes when analyzing binaries with excessive jump chains. th...

EUVD-2026-110320

Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked incomplete fix of GHSA-hxp9-w8x3-p566...

GHSA-GG6H-894W-4M9C RE2JS: Quadratic-time denial of service in re2js lookbehind matching

Summary Using the opt-in LOOKBEHINDS flag together with any repeated-matching API matcher.find in a loop, matchAll, split, matcher.replaceAll causes quadratic-time Θn² matching, contradicting the library's own "linear time matching" guarantee. A single call with a 16,000-character input takes...

RE2JS: Quadratic-time denial of service in re2js lookbehind matching

Summary Using the opt-in LOOKBEHINDS flag together with any repeated-matching API matcher.find in a loop, matchAll, split, matcher.replaceAll causes quadratic-time Θn² matching, contradicting the library's own "linear time matching" guarantee. A single call with a 16,000-character input takes...

npm: RE2JS: Quadratic-time denial of service in re2js lookbehind matching

npm: RE2JS: Quadratic-time denial of service in re2js lookbehind matching vulnerability discovered by ? in WordPress npm re2js versions = 2.2.0, 2.8.7...

filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold

StrictSoftFileLock and AsyncStrictSoftFileLock apply the caller's mode to the sentinel the lock file at and to both claim files the files whose presence says a process wants or holds the lock. They create the two directories that hold the claims, .filelock and .filelock/claims, with a bare mkdir...

GHSA-M462-7RXW-WVPG filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses

StrictSoftFileLock and AsyncStrictSoftFileLock check .filelock the coordination directory that holds the lock's state with one lstat call on its name. lstat reports what a name is without following a symbolic link a file that redirects to another path. After that check, the code reaches...