mitigate-cve-2026-23869-react-server-component-loops

How to Fix CVE-2026-23869: Mitigate React Server Component Loops Securing modern enterprise frontend applications requires continuous monitoring of server-side data fetching layouts and framework component life cycles. With the recent public disclosure of CVE-2026-23869, engineering teams are...

CVE-2025-5095-POC

How To Use: Open Login.htm and edit the places where IP:PORT is to the victim address Edit the var LoginVersion = "Check On The Victim Site"; part to the victim page version, by this, you can visit the victim page and view as source WARNING: THIS CVE ONLY WORKS ON VERSIONS OLDER THAN 1.0.60...

CVE-2021-21974_vuln_dectection

CVE-2021-21974 Vulnerability Detector A Python-based security tool for detecting CVE-2021-21974 vulnerability in SLP Service Location Protocol implementations, specifically targeting VMware ESXi systems. This tool performs safe, non-exploitative detection by analyzing SLP service responses and...

CVE-2026-109786

A flaw was found in fail2ban. The OpenSSH service filter improperly parses log entries when identifying offending network addresses. A remote, unauthenticated attacker can supply a crafted username during login attempts, causing the service to associate failed authentication events with an...

firefox: thunderbird: Privilege escalation in the DOM: Service Workers component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Service Workers component...

thunderbird: Thunderbird: Memory safety violations via maliciously crafted mail headers

A flaw was found in Thunderbird where a maliciously constructed mail header could lead to ambiguous parsing. This vulnerability could result in multiple mail header fields being incorrectly interpreted as one, or cause memory safety violations. A remote attacker could potentially exploit this to...

thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line

A flaw was found in Thunderbird. A remote attacker could exploit this vulnerability by sending a maliciously constructed Internet Message Access Protocol IMAP line. This could lead to an out-of-bounds buffer read, potentially resulting in information disclosure or a denial of service...

firefox: thunderbird: Privilege escalation in the DOM: Service Workers component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Service Workers component...

thunderbird: Thunderbird: Out-of-bounds read via maliciously constructed IMAP line

A flaw was found in Thunderbird. A remote attacker could exploit this vulnerability by sending a maliciously constructed Internet Message Access Protocol IMAP line. This could lead to an out-of-bounds buffer read, potentially resulting in information disclosure or a denial of service...

thunderbird: Thunderbird: Memory safety violations via maliciously crafted mail headers

A flaw was found in Thunderbird where a maliciously constructed mail header could lead to ambiguous parsing. This vulnerability could result in multiple mail header fields being incorrectly interpreted as one, or cause memory safety violations. A remote attacker could potentially exploit this to...

cve-2024-55591-poc

CVE-2024-55591 - Fortinet FortiOS Authentication Bypass An educational implementation in Go demonstrating the technical mechanics of CVE-2024-55591 , an authentication bypass vulnerability affecting Fortinet FortiOS. This repository is intended strictly for security research, defensive analysis,...

CVE-2026-109758

Perforce Helix Authentication Service HAS deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In affected versions of HAS, the installation templates contain a default credential which the installe...

CVE-2017-9430

i,am Gihad from Libya !! DNSTracer-1.8.1---Buffer-Overflow CVE-2017-9430 What Stack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of service application crash or possibly have unspecified other impact via a command line with a long name argument that is...

CVE-2026-54992-PoC

CVE-2026-54992 PoC Proof of concept for the Microsoft Message Queuing remote-read integer overflow tracked as CVE-2026-54992. The PoC uses two Windows VMs. A normal user on the vulnerable target asks the local MSMQ service to read from a queue hosted by the helper. The helper returns a malformed...

CVE-2026-109758

Perforce Helix Authentication Service HAS deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In affected versions of HAS, the installation templates contain a default credential which the installe...

CVE-2026-109758

Perforce Helix Authentication Service HAS deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In affected versions of HAS, the installation templates contain a default credential which the installe...

EUVD-2026-98279

Perforce Helix Authentication Service HAS deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In version 25.2, the installation templates contain a default credential which the installer copies int...

CVE-2026-109758

The Perforce Helix Authentication Service (HAS) (versions 2022.1 - 2025.2) is vulnerable to unauthorized access because the installer copies a default SCIM bearer token into the active configuration instead of generating a random one. An attacker who knows this default token can authenticate to t...

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution

UnrealIRCd-3.2.8.1-Backdoor-Command-Execution Script that exploits the vulnerability that allows establishing a backdoor in the UnrealIRCd service with CVE-2010-2075 Usage usage: IRCBackDoorCommandExecution.py -h targethost targetport attackerhost attackerport...

CVE-2019-0708

CVE-2019-0708 Blue Screen PoC Windows 7 64-bit has been tested〜 Command: python crashpoc.py ip 64 https://github.com/n1xbyte/CVE-2019-0708/ Leaving for a wedding tomorrow, if I can't find anything then someone else take the reins Going to drop the crash PoC here Friday if there isnt one public...