174255 matches found
CVE-2022-44268
CVE-2022-44268 🧙♂️ CVE-2022-44268 ImageMagick Arbitrary File Read Usage 🛠 Poison the image ☣️ python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png Upload poisoned PNG image. Check if exploit was successful 🗡 python3 CVE-2022-44268.py --url...
-cve-2021-46381
D-Link DAP-1620 arbitrary file read vulnerability fofa search statement: "DAP-1620" && title=="D-LINK" Use python3 DLINL.py...
CVE-2025-8422
CVE-2025-8422 Propovoice targetfile Examples: python3 cve-2025-8422-exploit.py https://example.com [email protected] python3 cve-2025-8422-exploit.py https://example.com [email protected] /../../../wp-config.php...
CVE-2026-103636
Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ repo: datasketches-cpp. varoptunion::deserialize read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes...
CVE-2026-103513
Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...
CVE-2026-103635
Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...
CVE-2026-21858-and-CVE-2025-68613
Ni8mare: n8n Pre-Auth RCE CVE-2026-21858 & CVE-2025-68613 — Vulnerability Lab & PoC Report Hands-on lab environment Vulnerable Lab and a detailed exploitation analysis report of the Ni8mare vulnerability chain on the n8n platform — from Arbitrary File Read CVE-2026-21858 to Remote Code Execution...
CVE-2021-30632
From: https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE-2021-30632 The analysis of this bug can be found here. This is a Chrome bug that is reported by an anonymous researcher and was believed to be exploited in the wild. The exploit here is tested on v8 version...
EUVD-2026-96309
Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ repo: datasketches-cpp. varoptunion::deserialize read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes...
CVE-2026-103636
The Apache DataSketches C++ library (repo: datasketches-cpp ) contains an out-of-bounds read vulnerability in the VarOpt union deserialization function. The var_opt_union::deserialize() function fails to properly validate the preamble of a non-empty union, potentially reading up to 24 bytes past ...
CVE-2026-103636 Apache DataSketches: datasketches-cpp: Out-of-bounds read in VarOpt union deserialization allows denial of service via a truncated sketch
Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ repo: datasketches-cpp. varoptunion::deserialize read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes...
CVE-2026-103636 Apache DataSketches: datasketches-cpp: Out-of-bounds read in VarOpt union deserialization allows denial of service via a truncated sketch
Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ repo: datasketches-cpp. varoptunion::deserialize read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes...
CVE-2026-103635 Apache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch
Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...
EUVD-2026-96308
Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...
CVE-2026-103635
The Apache DataSketches C++ library (repo: datasketches-cpp ) is vulnerable to an out-of-bounds read during the deserialization of compact Theta sketches . Specifically, the compact_theta_sketch::deserialize() and wrapped_compact_theta_sketch::wrap() functions read header fields without first ver...
CVE-2026-103635 Apache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch
Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...
CVE-2026-103513 Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in the CPC sketch deserialization allows memory corruption via a crafted sketch
Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...
EUVD-2026-96307
Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...
CVE-2026-103513
The Apache DataSketches C++ library (repository: datasketches-cpp ) is vulnerable to out-of-bounds read and write during CPC sketch deserialization. The root cause is a failure to validate the read position during decoding and a lack of validation for decoded row indices and header fields (includ...
CVE-2026-103513 Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in the CPC sketch deserialization allows memory corruption via a crafted sketch
Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...