CVE-2021-3773

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🚀 Port Shadow...

CVE-2003-0264

CVE-2003-0264 Exploit for buffer overflow in SLmail 5.5 CVE-2003-0264 Based on: https://github.com/Gallopsled/pwntools https://github.com/rapid7/metasploit-framework Example output: $ ./slmail-into-shell.py + Opening connection to 192.168.15.100 on port 110: Done + Trying to bind to 0.0.0.0 on po...

CVE-2026-14960-CVE-2026-14961

Privilege Escalation Vulnerabilities in Pegatron TdeIo64 Driver tdeio64.sys | ---|--- CVE IDs| CVE-2026-14960, CVE-2026-14961 Vendor| Pegatron Corporation Product| TdeIo Driver tdeio64.sys Device Interface| \.\TdeIo Vulnerability Types| Improper Access Control CWE-284, Arbitrary Kernel Memory...

CVE-2026-98026

A flaw was found in the Linux kernel's network bridge subsystem. An attacker could exploit this vulnerability to cause a Denial of Service DoS or system crash through a use-after-free condition. This issue occurs during multicast port group removal, where the kernel immediately frees data...

CVE-2026-97535

A flaw was found in the Linux kernel's qla2xxx driver. A local user can cause a Denial of Service DoS via a system crash by triggering an out-of-bounds memory write during virtual port management. This issue occurs because the driver fails to validate virtual port index numbers against the fixed...

fast-uri vulnerable to authority injection via an unvalidated port in serialize

Impact fast-uri serializes the port component of a URI without validating it. When recomposing the authority, fast-uri escapes the userinfo and host components but concatenates the port verbatim, so a port value that is not a sequence of digits can inject authority delimiters. For example,...

EUVD-2026-70280

fast-uri vulnerable to authority injection via an unvalidated port in serialize...

GHSA-QW65-CVWX-89V3 fast-uri vulnerable to authority injection via an unvalidated port in serialize

Impact fast-uri serializes the port component of a URI without validating it. When recomposing the authority, fast-uri escapes the userinfo and host components but concatenates the port verbatim, so a port value that is not a sequence of digits can inject authority delimiters. For example,...

NPM: fast-uri vulnerable to authority injection via an unvalidated port in serialize

NPM: fast-uri vulnerable to authority injection via an unvalidated port in serialize vulnerability discovered by ? in WordPress Npm fast-uri versions 2.4.6...

Hscan

Hscan-Win-Gui HScan v1.20 Usage Instructions 1. System Requirements: Windows NT/2000/XP 2. Software Introduction: Multi-threaded detection of specified IP ranges specified hosts or host lists. GUI and command-line modes. Scan items: -name --- Get hostname; -port --- Default port scan; -ftp ---...

checker-CVE-2024-6387

OpenSSH Vulnerability Checker Overview This script scans a list of target IP addresses or ranges to determine if they are running vulnerable To CVE-2024-6387. Features Scans IP addresses, domain names, file paths containing IP addresses, or CIDR network ranges. Checks a specified port default: 22...

CVE-2018-9995-rs

Overview This repository contains a proof-of-concept PoC exploit implemented in Rust targeting CVE-2018-9995. The code is for research and educational purposes only. CVE Details Identifier: CVE-2018-9995 Summary: Proof-of-concept exploit demonstrating the vulnerability see public advisories for...

dirtyfrag-arm64

dirtyfrag-arm64 arm64/aarch64 port of V4bel/dirtyfrag CVE-2026-43284, CVE-2026-43500. Tested on Ubuntu 24.04.4 LTS with linux-aws 6.17.0-1013-aws on AWS Graviton newest available as of this writing. Full writeup with AppArmor bypass analysis, hardening notes, and detection notes:...

CVE-2026-52199

CVE-2026-52199 : Unauthenticated Remote Code Execution in UZ801 4G Router Vulnerability Summary A critical Incorrect Access Control vulnerability exists in the Generic OEM UZ801v2.1 4G LTE Router Firmware V3.4.3. The device improperly exposes an unauthenticated Android Debug Bridge ADB daemon...

POC-CVE-2020-0796

- Affected versions - Windows 10 Version 1903 for 32-bit Systems - Windows 10 Version 1903 for ARM64-based Systems - Windows 10 Version 1903 for x64-based Systems - Windows 10 Version 1909 for 32-bit Systems - Windows 10 Version 1909 for ARM64-based Systems - Windows 10 Version 1909 for...

CVE-2022-1388

Vuln Impact This vulnerability may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services. Vuln Product F5 BIG-IQ 11.6.1 - 11.6.5 F5 BIG-IP...

CVE-2026-49994

Bluehood , a local Bluetooth activity monitor, is vulnerable to an authentication bypass in versions prior to 0.7.1 . When auth_enabled is active, only HTML page handlers enforce session validation; however, the */api/ handlers (including settings, devices, groups, and per-device endpoints like /...

CVE-2026-49994 Bluehood: Missing authentication on Bluehood API routes when web auth is enabled

Bluehood monitors local bluetooth activity. Prior to version 0.7.1, when authenabled is set in Bluehood, only the HTML page handlers enforced session validation. The /api/ handlers settings, devices, groups, per-device endpoints including /api/device/mac/notes called no auth check at all. A netwo...

Remote-Buffer-overflow-CVE-2003-0172

Remote-Buffer-overflow-CVE-2003-0172 ┌──cyberdesu㉿MSI- └─$ python3 buffer.py usage: exploit.py...

milvus-auth-audit

milvus-auth-audit Milvus authentication security audit script. Detects three authentication flaws: Flaw| CVE| Affected versions| Detection method ---|---|---|--- sourceid backdoor auth bypass| CVE-2025-64513| --port 19530 --mgmt-port 9091 --internal-port 53100 Arguments: --host: Milvus proxy...