156 matches found
CVE-2025-0288
CVE-2025-0287 ćć®ćŖććøććŖć«ćÆćčå¼±ćŖWindowsćć©ć¤ćć¼ć®ćŖćć¼ć¹ćØć³ćøćć¢ćŖć³ć°äøć«ē¹å®ćććčå¼±ćŖé¢ę°ć®ć¹ćÆćŖć¼ć³ć·ć§ćććå«ć¾ćć¦ćć¾ćć čŖ¬ę biontdrv.sysVul: čå¼±ćŖćć¼ćøć§ć³ biontdrv.sysSecure: ćććé©ēØęøćæćć¼ćøć§ć³ POCCVE-2025-0288.c: ę¦åæµå®čؼć³ć¼ć diff.png: čå¼±ćŖé¢ę°ć®ć¹ćÆćŖć¼ć³ć·ć§ćć č§£čŖ¬ č©³ē“°ćŖč§£ęćÆē§ć®ććć°ć§ć覧ććć ćć¾ć: å®å ØćŖč§£čŖ¬ćčŖć čå¼±ćŖé¢ę°...
CVE-2019-0709
CVE-2019-0708 ćØćÆć¹ććć¤ćé²č”äø čå¼±ę§é¢ę°ć«ććććć¾ćć...
EUVD-2026-31863
Algernon is a small self-contained pure-Go web server. Prior to 1.17.6, uploadedFileSaveIn in lua/upload/upload.go uses filepath.Join with the caller-supplied directory but performs no boundary check after joining. A directory of ../../../tmp resolves cleanly to /tmp, outside the web root. This...
The vulnerability of the __mptcp_alloc_tx_skb() function in the net/mptcp/protocol.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the mptcpalloctxskb function in the net/mptcp/protocol.c module of the Linux kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-2548
A flaw has been found in WAYOS FBM-220G 24.10.19. This affects the function sub40F820 of the file rc. Executing a manipulation of the argument upnpwaniface/upnpssdpinterval/upnpmaxage can lead to command injection. The attack can be executed remotely. The vendor was contacted early about this...
PT-2026-2167
Name of the Vulnerable Software and Affected Versions GestSup versions up to and including 3.2.56 Description The application does not verify the authenticity of client requests, leading to a cross-site request forgery condition. An attacker can potentially trick a logged-in user into submitting...
Exploit for CVE-2025-0288
CVE-2025-0287 This repository contains a screenshot of the vu...
EUVD-2025-201545
A vulnerability was determined in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this issue is the function RE2000v2RepeatergetwirelessclientlistsetClientsName of the file modform.so. Executing manipulation of the...
CVE-2025-14133 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so AP_get_wireless_clientlist_setClientsName stack-based overflow
A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this vulnerability is the function APgetwirelessclientlistsetClientsName of the file modform.so. Performing manipulation of the argument...
PT-2025-48672
Name of the Vulnerable Software and Affected Versions Circutor SGE-PLC1000/SGE-PLC50 version 9.0.2 Description A stack-based buffer overflow exists in the software due to insufficient bounds checking when handling user-supplied input. The ShowDownload function utilizes sprintf to format a string,...
The vulnerability of the tcf_ct_handle_fragments() function in the net/sched/act_ct.c module of the Linux kernel allows a remote attacker to compromise the accessibility of protected information.
The vulnerability of the tcfcthandlefragments function in the net/sched/actct.c module of the Linux kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of...
PT-2025-45473
Name of the Vulnerable Software and Affected Versions AstrBot Project version 3.5.22 Description The software contains an arbitrary file read issue in the encode image bs64 function. This function, defined in entities.py, opens an image specified by a user-controlled request body and returns its...
cryptidy-analysis
PoC for cryptidy pickle deserialization RCE šØ CVE PoC ā Unsaf...
EUVD-2020-17687
Malware in sbrugna...
EUVD-2025-28280
Malicious code in bioql PyPI...
EUVD-2025-25717
Malicious code in bioql PyPI...
EUVD-2023-43218
Malicious code in bioql PyPI...
CVE-2025-10838 Tenda AC21 WifiExtraSet sub_45BB10 buffer overflow
A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and...
CVE-2025-10325
CVE-2025-10325 affects Wavlink WL-WN578W2 (firmware 221110). The vulnerability centers on the sub_401340/sub_401BA4 function in /cgi-bin/login.cgi, where improper handling of the ipaddr parameter enables remote command injection. Public PoC/exploits exist, and multiple feeds confirm remote execut...
Linux Distros Unpatched Vulnerability : CVE-2024-56732
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HarfBuzz is a text shaping engine. Starting with 8.5.0 through 10.0.1, there is a heap-based buffer overflow in the hbcairoglyphsfrombuffer function...