cve-2011-1575-poc

This repository does not have a README...

CVE-2021-42205

CVE-2021-42205 ELAN Miniport touchpad Windows driver before 24.21.51.2, as used in PC hardware from multiple manufacturers, allows local users to cause a system crash by sending a certain IOCTL request, because that request is handled twice. authentication| complexity| vector ---|---|--- not...

CVE-2024-38077-POC

This repository does not have a README...

CVE-2025-24354-PoC

This repository does not have a README...

CVE-2025-7795

CVE-2025-7795 – Tenda Router Buffer Overflow Exploit Author : Byte Reaper Telegram : @ByteReaper0 CVE-ID : CVE-2025-7795 Vulnerability Type : Buffer Overflow Target : Tenda Routers Exploit : Remote, Unauthenticated 📝 Description A buffer overflow vulnerability exists in certain Tenda router model...

CVE-2026-111487

A flaw was found in the Qt3D module of the Qt framework. An out-of-bounds write vulnerability in the assimp scene import plugin allows an attacker to execute arbitrary code or cause a denial of service DoS. By tricking a user into opening a specially crafted 3D scene file, an attacker can corrupt...

CVE-2026-119719

A flaw was found in Blender. This vulnerability may allow arbitrary code execution or cause an application crash resulting in a Denial of Service DoS. By convincing a user to preview a specially crafted blend file with invalid image dimensions, an attacker can trigger an integer overflow in the...

CVE-2026-119718

A flaw was found in Blender. An integer overflow issue in the point cache allocation function ptcachedataalloc leads to a heap-based buffer overflow when reading point cache data. An attacker could exploit this vulnerability by convincing a user to load a specially crafted point cache file...

CVE-2026-61627

A flaw was found in libass. An attacker could exploit this vulnerability by enticing a user to process a specially crafted subtitle file, triggering an out-of-bounds write during line measurement. Successful exploitation may result in arbitrary code execution or cause an application crash leading...

CVE-2026-19773

A flaw was found in libwebsockets. This vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution by sending specially crafted HTTP/2 network traffic. The issue occurs due to improper input validation during the parsing of path headers compressed with HPACK a...

CVE-2026-104065

A flaw was found in Scribus. An out-of-bounds write vulnerability in the Micrografx Draw DRW plugin allows an attacker to achieve arbitrary code execution or a Denial of Service DoS by tricking a user into importing a specially crafted file. Due to improper validation of image offsets during...

CVE-2026-104064

A flaw was found in Scribus. An integer overflow in the Tagged Image File Format TIFF loader allows an attacker to trigger a heap buffer overflow by convincing a user to import a maliciously crafted TIFF image with oversized tile dimensions. Successful exploitation could allow arbitrary code...

CVE-2026-104061

A flaw was found in Scribus. This vulnerability allows arbitrary code execution or a Denial of Service DoS due to an out-of-bounds memory write in the Photoshop Document PSD image loader. An attacker could exploit this flaw by convincing a user to import or open a specially crafted PSD file,...

CVE-2025-31650

Apache Tomcat 10.1.39 - Denial of Service DoS This tool performs a high-volume, asynchronous HTTP/2 request flood using malformed priority headers to test the stability of Apache Tomcat servers running version 10.1.10 to 10.1.39. ⚠️ This is strictly for educational and research purposes only. ❌ Th...

Important: Red Hat Security Advisory: bind9.18 security update

An update for bind9.18 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

bind: BIND: Denial of Service via unbounded processing of crafted DNS messages

A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending specially crafted Domain Name System DNS protocol messages containing an excessive number of specific structures. Because BIND does not impose a limit on processing these structures, handling the malicious reque...

bind: bind: Denial of Service via assertion failure during redirect processing

A flaw was found in BIND. A remote attacker can cause a Denial of Service DoS by sending requests that trigger an assertion failure, abruptly terminating the resolver daemon. This vulnerability occurs when the resolver is configured with both a redirect zone and strict query name minimization whi...

bind: bind: Denial of service via assertion failure in RPZ query processing

A flaw was found in BIND. A remote attacker can cause a denial of service DoS by sending a sequence of recursive and non-recursive queries to an affected server. When BIND is configured to handle recursive queries alongside multiple Response Policy Zones RPZ with differing recursion settings,...

CVE-2026-84243 gettext: Directory traversal via the LANGUAGE environment variable

The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid ATSECURE. An attacker who can set LANGUAGE in the environment of a program that uses gettext c...

CVE-2026-84243

The gettext family of functions in GNU C Library version 2.0 and later is vulnerable to a directory traversal because it accepts entries in the LANGUAGE environment variable containing / or .. (unless the program is AT_SECURE). An attacker who can control this variable can force the program to lo...