com.fasterxml.jackson/jackson-core: tools.jackson.core/jackson-core: Jackson-core: Denial of Service via regular expression backtracking

A flaw was found in jackson-core. An attacker can supply specially crafted JSON that, when deserialized into a numeric target type, triggers a Regular expression Denial of Service ReDoS vulnerability. This occurs due to quadratic backtracking in the NumberInput.looksLikeValidNumber method's...

Important: Red Hat Security Advisory: Satellite 6.18 security update

A security update for Red Hat Satellite 6.18 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

cve-2018-5740

CVE-2018-5740 PoC Named, which is received response from legimate authoritative server, is crashed by CVE-2018-5740. FILES named.conf: BIND configration file for authoritative server. example.com: zone file for authoritative server. named-full-resolver.conf: BIND configration file for victim...

CVE-2025-58434-Flowiseai-Auth-Bypass-PoC

CVE-2025-58434 Flowiseai Auth Bypass PoC...

cve-2021-3449

CVE-2021-3449 OpenSSL This issue was reported to OpenSSL on 17th March 2021 by Nokia. The fix was developed by Peter Kästle and Samuel Sapalski from Nokia. Mitigation The only known fix is to update libssl1.1. Even though some applications use hardened TLS configurations by default that disable T...

Important: Red Hat Security Advisory: cjose security update

An update for cjose is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service

A flaw was found in cjose, a C library for Javascript Object Signing and Encryption JOSE. A remote, unauthenticated attacker can exploit a heap buffer overflow vulnerability in the AES Key Wrap decryption process. By submitting a crafted Javascript Web Encryption JWE to an application, the attack...

SpoolFool

SpoolFool Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability LPE Details The provided exploit should work by default on all Windows desktop versions. Please see the blog post for full technical details here. Usage PS C:\SpoolFool .\SpoolFool.exe SpoolFool By...

Moderate: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

grafana: Grafana: Denial of Service via unbounded memory growth in OAuth login route

A flaw was found in Grafana. An unauthenticated attacker can repeatedly access the OAuth login route with unique values. This can lead to unbounded memory growth, eventually exhausting system memory and causing the Grafana instance to crash. This results in a denial of service for legitimate user...

cve-2021-46422

Installation git clone https://github.com/CJ-0107/cve-2021-46422 cd cve-2021-46422 Usage This tool is a PoC written according to the development specifications of the pocsuite3 framework. Please download pocsuite3 before use. Project address https://github.com/knownsec/pocsuite3 Environment Pytho...

CS4239-Spring4Shell-POC

CS4239-Spring4Shell-POC Proof of concept for CVE-2022-22965 Spring4Shell for CS4239 G410 report. Adapted from this PoC to demonstrate unpatched & patched behavior. Running the demo There are 2 example programs dockerized in this repository with identical source code. One uses a vulnerable version...

CVE-2025-8760

Proof of Concept for CVE-2025-8760 Detailed write-up is available here...

CVE-2023-50164-PoC

CVE-2023-50164 Apache Struts path traversal to RCE vulnerability - Proof of Concept This PoC has been made to test an RCE Remote Code Execution by exploiting the Apache Struts2 vulnerability. Build the image and run a container: $ DOCKERBUILDKIT=1 docker build . -t struts2-rce-poc && docker run...

CVE-2023-27470_Exercise

CVE-2023-27470 EoP via Arbirary File Deletion Exercise This repository contains a local privilege escalation exercise that replicates CVE-2023-27470. Your mission, should you choose to accept it, find the vulnerability and get a SYSTEM Command Prompt! If you would like the jump to the solution,...

CVE-2017-1000117

CVE-2017-1000117 PoC Repository for VulApps Fork from joernchen/CVE-2017-1000117 git clone --recursive https://github.com/VulApps/CVE-2017-1000117.git will write the output of id to a file vul in /var/www/html. See More at VulApps...

Moderate: Red Hat Security Advisory: libXi security update

An update for libXi is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

libXi: libXi: Denial of Service via out-of-bounds read in XI2 class parser

A flaw was found in libXi. An out-of-bounds read vulnerability in the X Input 2 XI2 class parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. When an application receives and processes specially crafted input from the server, insufficient...

chromium-browser: angle: Out of bounds read in ANGLE

An out of bounds read flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553124799...

chromium-browser: angle: Out of bounds write in ANGLE

An out of bounds write flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/500127519...