11344 matches found
ysoserial.net
A proof-of-concept tool for generating payloads that exploit unsafe .NET object deserialization. Description ysoserial.net is a collection of utilities and property-oriented programming "gadget chains" discovered in common .NET libraries that can, under the right conditions, exploit .NET...
Formidable Forms < 2.05.02 - Cross-Site Scripting
Formidable Form Builder for WordPress versions before 2.05.03 contains a stored cross-site scripting caused by insufficient input sanitization and output escaping in form parameters like 'afterhtml', letting unauthenticated attackers inject and execute arbitrary scripts in victims' browsers id:...
catsploit
CATSploit🐈 CATSploit is an automated penetration testing tool using Cyber Attack Techniques Scoring CATS method that can be used without pentester. Currently, pentesters implicitly made the selection of suitable attack techniques for target systems to be attacked. CATSploit uses system...
CVE-2024-21111
These binaries were built from source using mansk1es code. https://github.com/mansk1es/CVE-2024-21111 Prebuilt binaries for Privilege Escalation in Oracle VM Virtual box prior to 7.0.16...
CVE-2018-16858-Python
CVE-2018-16858-Python Python implementation of CVE-2018-16858 Based on work from here and here...
snyk-js-jquery-565129
Este repositorio contiene los parches para CVE-2020-11022 y CVE-2020-11023 que afectan a todas las versiones de jQuery anteriores a la 3.5.0, incluyendo los parches de DanielRuf/snyk-js-jquery-174006. Estos parches se generaron con diff -u original patched patchfile. Aplicar los parches Puede...
CVE-2025-11371
Disclaimer This project is published for educational and research purposes only. Use of this software for attacking targets without explicit prior consent is illegal. The author is not responsible for any misuse, damage, or legal consequences resulting from the use of this code. Always follow...
CVE-2026-84444
libheif (HEIF/AVIF decoder/encoder) is vulnerable to an out-of-bounds heap write in versions prior to 1.23.2 when the WITH_UNCOMPRESSED_CODEC option is enabled. The root cause is a missing check_component_sizes() gate in unc_encoder::encode_tile(): an independently constructed image tile whose co...
CVE-2026-19477
A stack-based buffer overflow was identified in MCC Universal Library for Linux (uldaq) , a library used for MCC data acquisition on Linux, affecting version 1.2.1 and prior . The flaw can lead to information disclosure or arbitrary code execution with a local attack vector, low complexity, and n...
EulerOS 2.0 SP15 : python-idna (EulerOS-SA-2026-3791)
According to the versions of the python-idna package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and...
CVE-2026-71180
Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-55073
WeasyPrint helps web developers to create PDF documents. Prior to 70.0, server-side applications that configure a restrictive urlfetcher and pass attacker-influenced values to HTML.writepdf can have the restriction bypassed through the xmpmetadata or stylesheets options. In weasyprint/pdf/init.py...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in WebRTC in Google Chrome prior to version 94.0.4606.81 allowed a remote attacker who convinced a user to navigate to a malicious website to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in the UI of Google Chrome prior to version 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Before version 148.0.7778.216, using free in the UI of Google Chrome allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Before version 105.0.5195.52, using WebSQL in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Inappropriate implementations of performance APIs in Google Chrome prior to version 89.0.4389.72 allowed a remote attacker to leak cross-origin data through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Inappropriate implementations of Skia in Google Chrome prior to version 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox URL bar through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
In the Content Security Policy of Google Chrome prior to version 149.0.7827.53, a bypass of the content security policy was possible when a remote attacker used a crafted HTML page. Chromium security severity: Low...