CVE-2018-9539

CVE-2018-9539 Proof-of-concept code for CVE-2018-9539 If you have any questions, you are welcome to DM me on Twitter @tamirzb. Build In order to build this: 1. Download the Android source code. 2. Put this repository in AOSP/external. 3. Run the following commands: cd AOSP source build/envsetup.s...

CVE-2017-0781

CVE-2017-0781 PoC Overview This is an implementation of the CVE-2017-0781 Android heap overflow vulnerability described in the Blueborne whitepaper released by Armis. Further reading: https://www.armis.com/blueborne/ In the current state, this code only demonstrates the overflow and the ability o...

BlueGate

BlueGate PoC for the Remote Desktop Gateway vulnerability - CVE-2020-0609 & CVE-2020-0610. Thanks to ollypwn for pointing out my silly mistake! Setup I'm using a patched version of pydtls as the original repository wouldn't build properly. cd pydtls sudo python setup.py install Denial of Service ...

CVE-2022-48474_CVE-2022-48475

CVE-2022-48474 & CVE-2022-48475 PoC & exploits for CVE-2022-48474 & CVE-2022-48475 "Control de Ciber" is a Cybercafe management software. Multiple Denial-of-Service DoS vulnerabilities in versions prior to 1.650. An unauthenticated remote attacker can send a carefully crafted request that lead to...

PNCVE-Win10-20H2-Exploit

PrintNightmare-CVE-Win10-20H2-Exploit To run this exploit on Windows: Run this oneliner: curl https://raw.githubusercontent.com/peckre/PNCVE-Win10-20H2-Exploit/main/Win10Exploit.zip -o Win10Exploit.zip & tar -xf Win10Exploit.zip & run.bat NOTE: This will only work once per restart. If you run thi...

CVE-2022-4896

CVE-2022-4896 PoC & exploits for CVE-2022-4896 "Control de Ciber" is a Cybercafe management software. Multiple Denial-of-Service DoS vulnerabilities in versions prior to 1.650. An unauthenticated remote attacker can send a carefully crafted request that lead to a service crash. Spooler DoS Spoole...

vLLM input validation vulnerability

Versions of vLLM prior to 0.31.0 have a vulnerability related to input validation errors. This vulnerability stems from using the multi-modal UUID provided by the client as a cache identifier without proper consistency checks when the cache is hit. This allows unauthenticated attackers to cause t...

CVE-2026-43853

A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash...

CVE-2026-43853

A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash...

EUVD-2026-104854

A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash...

CVE-2026-43853

A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash...

CVE-2026-43853

A vulnerability exists that allows an attacker to send a crafted message to trigger an assertion fault , which can result in a service crash . The provided documents do not specify the affected software, hardware, or specific versions. No exploit details or remediation steps are provided.

PT-2026-118289

A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash...

Oracle Siebel CRM Integration security vulnerabilities

The Oracle Siebel CRM Integration versions from 17.0 to 26.9 have security vulnerabilities. These vulnerabilities stem from EAI component issues, which may allow unauthenticated attackers to access through the HTTP network, causing the service to hang or crash frequently...

Oracle Solaris security vulnerabilities

Oracle Solaris 11.4 has security vulnerabilities. These vulnerabilities stem from issues with the Kernel component, which may allow unauthenticated attackers to access through the HTTP network, causing the service to hang or crash frequently...

Oracle VM VirtualBox security vulnerabilities

Oracle VM VirtualBox 7.2.16 has a security vulnerability. This vulnerability stems from issues with the Core components and could allow low-privilege attackers to log in and execute actions on the infrastructure. This could lead to unauthorized access to critical data or all data, causing the...

CVE-2026-16179 IBM DataPower Gateway Buffer Underwrite

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a heap buffer underwrite and potentially crash the service...

CVE-2026-103011

Heap-based buffer overflow in the legacy Blowfish encryption routine BlowFishEncryptor::Encode, called by EncryptToString in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service service crash, and possibly other unspecified impact. In...

CVE-2026-103011 Heap-based Buffer Overflow in hMailServer

Heap-based buffer overflow in the legacy Blowfish encryption routine BlowFishEncryptor::Encode, called by EncryptToString in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service service crash, and possibly other unspecified impact. In...

CVE-2026-103011

Heap-based buffer overflow in the legacy Blowfish encryption routine BlowFishEncryptor::Encode, called by EncryptToString in Progressive Robot hMailServer 6.0.0 through 6.3.5 allows an authenticated mailbox user to cause a denial of service service crash, and possibly other unspecified impact. In...