CVE-2026-119196

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit value accumulated from earlier fragments. Attacker-controlled BER or CER input contains many constructed BIT STRING fragments; schema-driven DER also accepts...

CVE-2026-119194

pyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5, schemaless container decoding stores every decoded component's TagSet in a growing set even though only one-versus-multiple tag types must be distinguished. Attacker-controlled BER, CER, or DER input contains many distinct long...

CVE-2026-119195

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY decoding repeatedly concatenates each fragment onto a growing bytes value. Attacker-controlled BER or CER data can use many constructed OCTET STRING or character-string fragments. DER reject...

CVE-2026-119272

Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-119264

Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Security Bulletin: IBM MQ Appliance is affected by an out-of-bounds read vulnerability (CVE-2026-11831)

Summary IBM MQ Appliance has addressed an out-of-bounds read vulnerability that could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout when processing a specially crafted client request. Vulnerability Details...

Security Bulletin: IBM MQ is affected by an out-of-bounds read vulnerability (CVE-2026-12669)

Summary IBM MQ has addressed an out-of-bounds read vulnerability when sending malformed compressed data Vulnerability Details CVEID:CVE-2026-12669 DESCRIPTION: IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the dat...

CVE-2024-38077-POC

CVE-2024-38077-POC Pseudocode, for backup purposes, not original, please follow the original author: The vulnerability author has published the first analysis article: https://sites.google.com/site/zhiniangpeng/blogs/MadLicense...

CVE-2025-27591_PoC

Proof-Of-Concept Usage 1. build go build -o poc exploit.go 2. move the binary to the target machine https://github.com/user-attachments/assets/d5e3f8e7-ba05-42f8-a533-21179cd77177 References https://nvd.nist.gov/vuln/detail/CVE-2025-27591 https://access.redhat.com/security/cve/cve-2025-27591...

CVE-2024-24137

CVE-2024-24137: Student File Managment System SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24137.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24137/blob/main/CVE-2024-24137.md...

Spectre-Vulnerability-CVE-2017-5753-

Spectre-Vulnerability-CVE-2017-5753- This repository contains a report on Specre vulnerability and details on exploiting vulnerability. The Proof of Concept used for this was reffered from https://github.com/Eugnis/spectre-attack GitHub repository. Originally, the code was from a report by Graz...

CVE-2025-6543

CVE-2025-6543 Citrix Bleed 2 PoC...

CVE-2025-32013

CVE-2025-32013 Security Advisory and PoC for CVE-2025-32013 How to Use 1. Start here: Read this README file for an overview of the repository structure and contents. 2. Internal Security Advisory: Open 01SecurityAdvisory.md to see the detailed write-up addressing the vulnerability, its impact, an...

POC-CVE-2025-52970

POC-CVE-2025-52970 python POC-CVE-2025-52970.py -h usage: POC-CVE-2025-52970.py -h -t TARGET | -l LIST options: -h, --help show this help message and exit -t, --target TARGET Single target URL e.g., https://xx.xx.xx.xx -l, --list LIST Path to file containing target URLs, one per line run poc scri...

CVE-2026-59396

A denial-of-service vulnerability exists in UAA's privatekeyjwt client-authentication mechanism. When UAA retrieves a remote JWKS URI, it caches the response. Invalid authentication attempts can trigger full deserialization of this cached data. An attacker with prerequisites write access to clien...

CVE-2026-115456

A flaw was found in gcc. An attacker could cause a Denial of Service DoS by passing a string that is not null-terminated to the std::fromchars function in the libstdc++ library. This issue triggers an out-of-bounds read beyond the allocated buffer, potentially leading to invalid data parsing or a...

CVE-2026-115274

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's JSON module allows an unauthenticated attacker who supplies a JSON document to cause a denial of service through CPU and memory exhaustion. JSON.decode/1 and JSON.decode!/1 convert each integer liter...

CVE-2026-109821

Improper Validation of Specified Quantity in Input vulnerability in the Elixir standard library's URI module allows an attacker who supplies a URL to cause a denial of service through CPU exhaustion. URI.parse/1 converts the port component with String.tointeger/1 in splitauthority/1...

CVE-2017-0478

CVE-2017-0478 poc of CVE-2017-0478 The file of FrameSequencewebp.cpp is not compiled in AOSP currently, so when you compile libframesequence.so with webp, you need compile with FRAMESEQUENCEINCLUDEWEBPlike this: FRAMESEQUENCEINCLUDEWEBP=true mm -B...

CVE-2024-35333

CVE-2024-35333 A stack buffer overflow vulnerability exists in the charset handling functionality of html2xhtml version 1.3. An attacker can exploit this vulnerability by providing a specially crafted input, which would lead to the overflow of the 'buf' variable located on the stack. Successful...