920358 matches found
log4j-spring-vuln-poc
log4j Spring vulnerable POC This is a POC for a simple spring boot start backend with maven including vulnerable log4j version for CVE-2021-44228 Spring boot bootstrapped with https://start.spring.io. commands ./mvnw spring-boot:run: start server ./mvnw dependency:tree: print dependency tree and...
F5-BIG-IP-POC
F5-BIG-IP POC Written in Go, a collection of POCs for CVE-2020-5902, CVE-2021-22986, CVE-2022-1388. Other F5 POCs will be added later. author:160team.west9B For use only by security researchers with authorization. Comply with cybersecurity laws. Any consequences are your own responsibility, and t...
openjdk: Enhance XML Processing (Oracle CPU 2026-10)
A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting crafted data across the network to applications that expose JAXP interfaces, such as through a web service. Successful exploitation can...
openjdk: Enhance MIDI file handling (Oracle CPU 2026-10)
A flaw was found in the Sound component of Java SE and GraalVM. This issue allows an unauthenticated remote attacker to cause a partial Denial of Service DoS by convincing a user to run untrusted code within a sandboxed Java environment...
openjdk: Enhance font rendering (Oracle CPU 2026-10)
A flaw was found in OpenJDK's 2D component. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to exposed application programming interfaces APIs, such as through a web service or application that processes graphics data. A successful attack...
Critical: Red Hat Security Advisory: OpenJDK 21.0.13 Security Update for Windows Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
CVE-2026-27831-POC
CVE-2026-27831-POC Poc Exploit for CVE-2026-27831 This is proof of concept exploit for remote heap based out-of-bound read at rldns version 1.3 that causes denial of service. rldns is an open source DNS server for linux, freebsd & netbsd, running on x8664 architecture. Rldns Version 1.3 has a...
CVE-2025-31258-PoC
CVE-2025-31258-PoC 1day practice - Escape sandbox partial using RemoteViewServices...
Absolutely-Positively-NOT-Hacking-Back-with-Pcap
Absolutely Positively NOT Hacking Back with Pcap Streaming Unexpected Network Byte Sequences with High Probability of Blue Screening or Otherwise Crashing Attacker Command-and-Control Nodes This was presented at TheSAS2019: https://www.youtube.com/watch?v=Z1-4-amGdaM...
openjdk: Enhance XML Processing (Oracle CPU 2026-10)
A flaw was found in the Java API for XML Processing JAXP component of OpenJDK. An unauthenticated remote attacker could exploit this vulnerability by submitting crafted data across the network to applications that expose JAXP interfaces, such as through a web service. Successful exploitation can...
openjdk: Enhance diagnostic sessions (Oracle CPU 2026-10)
A flaw was found in OpenJDK's Serviceability component. An unauthenticated attacker with local access to the host system can exploit this vulnerability with user interaction, such as by supplying crafted input to Serviceability application programming interfaces APIs. A successful attack can resu...
Critical: Red Hat Security Advisory: OpenJDK 21.0.13 Security Update for Portable Linux Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
CVE-2026-99126
A flaw was found in the Linux kernel's s390 CTCM Channel-to-Channel driver. A denial of service DoS can occur when the driver processes invalid Exchange Station Identification XID data during channel negotiation. If a peer XID is missing or a channel pairing mismatch occurs, the driver attempts t...
CVE-2026-23918-test
CVE-2026-23918-test This repository contains a Proof of Concept PoC demonstrating the Double Free vulnerability CVE-2026-23918 in Apache HTTP Server 2.4.66 modhttp2. The vulnerability stems from a race condition during early RSTSTREAM frame processing. I focused on the timing window where the...
CVE-2026-99127
A flaw was found in the Linux kernel's page pool memory allocator. This vulnerability allows an attacker to cause a Denial of Service DoS by triggering network traffic that requests odd-sized memory fragments. Because the allocator does not properly align fragment offsets for odd-sized requests o...
CVE-2026-99125
A flaw was found in the Linux kernel's s390 Processor Activity Instrumentation PAI performance monitoring subsystem. A local user can trigger a Denial of Service DoS by generating heavy sampling workloads or manipulating event controls, causing the kernel to improperly handle consecutive stop...
CVE-2026-99124
A flaw was found in the Linux kernel's s390 PCI subsystem. A local user can trigger an out-of-bounds read and potential information disclosure by submitting an error report with a claimed length greater than the actual payload provided. This flaw causes uninitialized kernel memory past the...
PoC-crash-CVE-2020-13398-
PoC-crash-CVE-2020-13398- CVE-2020-13398 PoC...
CVE-2026-99121
A flaw was found in the Linux kernel's IPv4 networking component. A race condition in the fibrebalance function can cause a division-by-zero error when routing configurations change concurrently during route rebalancing. A local user or concurrent network event can trigger this flaw, causing the...