CVE-2025-6218

CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - WinRAR Path Traversal - Remote Code Execution RCE Proof of Concept More information: https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/ https://www.zerodayinitiative.com/advisories/ZDI-25-409/ RARLAB WinRAR...

ZDI-CAN-16857

Exploit for CVE-2023-32163 ZDI-CAN-16857 0-day Here you can read my report 📜 Here you can buy me a unicorn 🦄 Share the Knowledge!...

CVE-2019-17147_Practice_Material

CVE-2019-17147PracticeMaterial This repo contains dumped flash partitions with firmware version vulnerable to CVE-2019-17147, and some useful binaries to downgrade and debug your WR841NV14 router. Doing hardware modifications such as overwriting flash chip partitions have its risks. Evaluate the...

CVE-2026-26179

CVE-2026-26179 PoC for CVE-2026-26179 / ZDI-26-276, my very own Secure Kernel bug. I'm well aware that I have a dedicated repository for my vulnerabilities and/or exploits, but this bug in particular is rather special at least to me. As such, I have opted to give it its own repository. I also pla...

CVE-2026-54984

CVE-2026-54984 Windows ICC file parsing out-of-bounds write — remote code execution Reported through the Zero Day Initiative as ZDI-CAN-30441 , published as ZDI-26-543 , fixed by Microsoft in the August 2026 update cycle. Hi, I'm Kağan Çapar. I reported this vulnerability to the Zero Day...

CVE-2026-0766

CVE-2026-0766: OpenWebUI Remote Code Execution Educational Security Research Repository This repository contains proof-of-concept exploitation code for CVE-2026-0766 , a remote code execution vulnerability in OpenWebUI discovered and published by the Zero Day Initiative ZDI. ⚠️ Disclaimer This...

CVE-2015-6612

CVE-2015-6612 The detail of the vulnerability please refer to description.pdf My sad story about this bug: I repoted this issue to ZDI last March, at the beginning, they said they couldn't reproduce it in the latest Android, after half a month comunication, they decided not to pursue acquisition ...

CVE-2021-21042

CVE-2021-21042 Inspired from https://www.zerodayinitiative.com/blog/2021/2/17/zdi-21-171-getting-information-disclosure-in-adobe-reader-through-the-id-tag...

CVE-2026-92179

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

EUVD-2026-79137

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2026-19781 Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...

EUVD-2026-79133

OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target...

EUVD-2026-79132

OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the targ...

EUVD-2026-79131

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...

EUVD-2026-79129

Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fabric.js. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on t...

CVE-2019-0604_sharepoint_CVE

CVE-2019-0604 CVE-2019-0604 From https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb:vhci-hcd: Do not drop references before new references are obtained. In several places, the driver maintains stale pointers to references that can still be used. Ensure that this does not occur. Strictly speaking, this resolv...

Astra Linux – Vulnerability in gst-plugins-good1.0

GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability, but the attack vectors may vary...

Astra Linux – Vulnerability in gst-plugins-bad1.0

GStreamer SRT File Parsing: Heap-Based Buffer Overflow and Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability, but the attack...

Astra Linux – Vulnerability in GIMP

GIMP JP2 File Parsing: Heap-Based Buffer Overflow and Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability, as the target must visit a malicious page ...