CVE-2026-48816: Insufficient Verification of Data Authenticity

sigstore-js provides JavaScript libraries for interacting with Sigstore services. Prior to 3.1.1, @sigstore/verify derives a transparency-log timestamp from tlogEntries.integratedTime for bundle v0.2 inclusionProof-only entries even though the inclusion proof path does not cryptographically bind...

EUVD-2025-19505

Malicious code in bioql PyPI...

CVE-2025-0634

Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2...

CVE-2025-53075

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2...

CVE-2025-53075: Improper Input Validation

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2...

CVE-2025-0634: Use After Free

Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2...

CVE-2023-37656

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

CVE-2023-37656

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

Design/Logic Flaw

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

CVE-2023-37656

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

CVE-2023-37656

WebsiteGuide v0.2 is vulnerable to Remote Command Execution RCE via image upload...

[Hasere v0.2] Discover vHosts using Google and Bing

Hasere is a tool that can discovery the virtual hosts and related filetype using google and bing search engines. Optionally, it uses the nmap to determine the ip addresses which have 80 or 443 opened port. After that it uses the bing search engine to determine which domains were hosted or have be...

BeeSns Twitter V0. 2 0day-vulnerability warning-the black bar safety net

Affected versions: BeeSns V0. 2 Official address: http://www.beesns.com/ Vulnerability type: elevation of Privilege Vulnerability analysis: IP filtering is not strict,causing the user can submit malicious parameters to enhance their own privileges. This microblogging system style nice, personally...

SimplePlayer v0.2 0day (.wav) overflow DOS Exploit

Exploit for unknown platform in category dos / poc ================================================== SimplePlayer v0.2 0day .wav overflow DOS Exploit ================================================== Title: SimplePlayer v0.2 0day .wav overflow DOS Exploit CVE-ID: OSVDB-ID: Author: mrme Publishe...

SimplePlayer 0.2 - .wav Overflow Denial of Service

SimplePlayer 0.2 - .wav Overflow Denial of Service !/usr/bin/python Title: SimplePlayer v0.2 0day .wav overflow DOS Exploit Found by: mrme seeleymagic at hotmail dot com Greetz to: Corelan Security Team::corelanc0d3r/EdiStrosar/Rick2600/MarkoT Tested on: Windows XP SP3 Happy New Year! POC: crash ...

tinyBB v0.2 Message Board Remote File Inc.

Author : ShaFuck31 maiL : [email protected] Script Name : tinyBB v0.2 Message Board DownLoad Script : http://php.arsivimiz.com/indir.php?id=335 Vuln. File : footers.php Vuln. Code : requireonce$tinybbfooters; Vuln. : http://Victim.Com/ScriptPath/footers.php?tinybbfooters=shELL Thanks : BLaSTE...

Lib2 PHP v0.2 (DOCUMENT_ROOT) Remote File Inclusion Vulnerability

------------------------------------------------------------------------------------------------------------------- MefistoLabs.Com PreSents... Script: Lib2 PHP v0.2 Script Download1: http://www.omnistarinc.com/fonin/projects/lib2/lib2-0.2.tar.gz Script Download2:...

ezConvert: phpBB ezBoard converter v0.2 (ezconvert_dir) Remote File Include Exploit

No description provided by source. C xoron Name: ezConvert: phpBB ezBoard converter v0.2 ezconvertdir Remote File Include Exploit Author: xoron Exploit coded by xoron Download: http://sourceforge.net/project/showfiles.php?groupid=114129 xoron.biz - xoron.info www.xoron.info/bugs/ezconvert.txt...

MPCS v0.2 - XSS

MPCS v0.2 Homepage: http://tpvgames.co.uk/mpcs Affected files: comment.php XSS vuln with cookie & full path disclosure: Direct html injection doesnt seem to work, however, if you navigate to the code below in your browser, and then post a comment on the same page, our XSS example will occure...