CVE-2026-65343

CVE-2026-65343 — AppleKeyStore OOB Read KASLR Defeat Component: AppleKeyStore kernel extension — LibSerSEPControlDeserialize Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds read in SEP control message deserialization Impact: Kernel pointer lea...

CVE-2016-5195

This record is for learning purposes only; any illegal use is prohibited. Principle The vulnerability works by concurrently flushing dirty pages, causing the content of a file that was originally read-only to be modified. If the modified file is owned by root and has the SUID permission, it can b...

vivo-root-build

PD2415 6.6.89 フルフロー候補 このソースは、同一デバイス/同一SoCのPD2415 6.6.57 IonStackエンジンに基づいています: perf KASLR、pselect GhostLock、CFI fops、pipe physrw。ダンプステートキャリアクロージャは、検証済みのPD2241メソッドから保持されています。...

CVE-2026-39363

CVE-2026-39363 — Vite Dev Server WebSocket Arbitrary File Read Batch Detection Disclaimer: This tool is intended for authorized security testing and educational research only. Users must comply with local laws and regulations; unauthorized scanning or attacking others' systems is illegal. The...

WordPress SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin <= 4.7.42 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read vulnerability

Authenticated Administrator+ Path Traversal to Arbitrary File Read vulnerability discovered by Wordfence PRISM in WordPress Plugin SSL Zen versions = 4.7.42...

CVE-2026-26336-PoC

CVE-2026-26336 — Alfresco Share Unauthenticated File Read Overview Alfresco Share exposes a /share/page/resource/ endpoint used to serve static resources. In vulnerable versions, this endpoint does not properly restrict path traversal, allowing an unauthenticated attacker to read arbitrary files...

learnjavabug

This project is for security research only. It is forbidden to use this project to launch illegal attacks. The user is responsible for any consequences. This is a personal project for reproducing and publishing vulnerabilities that I find interesting or that have a significant impact. There isn't...

CVE-2026-7482-PoC

CVE-2026-7482: Ollama Heap Out-of-Bounds Read 1-Day PoC This repository contains a 1-day Proof of Concept PoC exploitation chain for CVE-2026-7482 , an unauthenticated Out-of-Bounds OOB Read vulnerability in Ollama's GGUF model loader versions prior to 0.17.1. Note: This is a 1-day research...

CVE-2021-43798

CVE-2021-43798 by Privacy Hunter Affected versions: Grafana 8.0.0-beta1 to 8.3.0 patched versions excluded Vulnerability type: Directory Traversal Severity: Critical Platform: Grafana open-source monitoring and observability platform ⚠️ Vulnerability details Directory traversal can be performed in...

CVE-2026-93543

A flaw was found in libXi. An out-of-bounds read vulnerability in the X Input 2 XI2 class parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. When an application receives and processes specially crafted input from the server, insufficient...

CVE-2026-48072 Docmost: Public image fileName path traversal leads to unauthorized local file read

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts attacker-controlled fileName path segments and resolves them against local storage without confinement to the intended image directory. An unauthenticated...

CVE-2026-48072

Docmost , an open-source collaborative wiki and documentation software, is vulnerable to a path traversal flaw in versions prior to 0.80.1 . The public avatar and logo image endpoints fail to confine file path segments to the intended directory, allowing an unauthenticated attacker to traverse ou...

CVE-2026-48072 Docmost: Public image fileName path traversal leads to unauthorized local file read

Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts attacker-controlled fileName path segments and resolves them against local storage without confinement to the intended image directory. An unauthenticated...

CVE-2026-81508

ESF-IDF is the Espressif Internet of Things IOT Development Framework. In 5.5.5, 6.0.1, and 6.1, the BlueDroid A2DP sink function btca2dpsinkhandleincmedia reads a timestamp field from the received media buffer before validating that the packet layout contains the field. A paired BR/EDR audio...

CVE-2021-21017

CVE-2021-21017 Not another Adobe Reader Byte Order Mark bug : root@kitploit: IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl !=...

desc_race-1

descrace "descrace" CVE-2021-30955 exploit for iOS 15.0 - 15.1.1 with stable kernel r/w primitives Exploit Method 1. Increase the capacity of IOSurfaceClient array to 0x2000, goal is to write a pointer whose content is totally controlled and then use IOSurfaceRootUserClient interfaces to achieve...

CVE-2026-41551

CVE-2026-41551 Reproduction Vulnerability: Siemens ROS fileserver / fileserver2 service relative path traversal CVSS v3.1: 9.1 AV:N / AC:L / PR:N / UI:N / S:U / C:H / I:H / A:N Affected versions: ros-sharp all name.substr10; // remove "package://" std::string package = address.substr0,...

SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit

= doi.org/10.5281/zenodo.18278825 = orcid.org/0009-0007-7728-256X RECONSTRUCTIONANALYSIS CVE-2026-21858: Ni8mare - n8n RCE Full Chain Exploit 1. Executive Summary & Overview This document presents a deterministic technical reconstruction analysis of the CVE-2026-21858 vulnerability, internally...

CVE-2021-43798-poc

CVE-2021-43798-poc Grafana8.x Arbitrary File Read python CVE-2021-43798-poc.py http://152.136.149.237:3000 /etc/passwd...

CVE-2026-93545

A flaw was found in libXi. An out-of-bounds read vulnerability in the XListInputDevices function allows a malicious X server to crash connected client applications. By returning specially crafted input device data when a client requests device information, the server can trigger an application...