699568 matches found
CVE-2026-53420
Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a escalation of privilege via network access...
CVE-2026-53420
A buffer overflow vulnerability exists in a Zoom Phone feature within Zoom Workplace Clients . This issue, categorized as CWE-120 (Buffer Copy without Checking Size of Input), could allow an unauthenticated user to perform an elevation of privilege via network access . The CVSS 3.1 score is 8.0 (...
CVE-2022-0739
CVE-2022-0739 Proof-of-Concept exploit SQLI BookingPress before 1.0.11 Usage Supply the URL to where the Booking Press plugin is in use on the application. bash exploit.sh '' e.g. Hashes are redacted in this demo ┌──user@user-/ └─$ bash sqliexploit.sh 'http://localhost/calendar/' / / / / \ / / /...
CVE-2021-27905
CVE-2021-27905 Apache Solr ReplicationHandler Server Side Request Forgery SSRF Hit Counter Apache Solr stands for Searching On Lucene with Replication is a free, open-source search engine based on the Apache Lucene library. Written in Java. Apache Solr has RESTful XML/HTTP and JSON APIs and clien...
CVE-2026-53418
The Zoom Workplace for Android application, specifically versions before 7.2.1 , is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). This flaw may allow an unauthenticated user to perform an escalation of privilege via network access . The CVSS 3.1 score is 8.1 (Hi...
Embedded-PDF
Embedded Backdoor Connection via PDF Files 😈 brought to you by Introduction This demonstration video shows how we can control the victim's device by sending the innocent-looking PDF file to the target which actually consists of embedded payload. The exploit was made public as CVE-2010-1240. As so...
CVE-2021-26828_ScadaBR_RCE
POC CVE-2021-26828ScadaBRRemoteCodeExecution ScadaBR 0.9.1 on Linux and through 1.0 and 1.12.4CE on Windows allows remote authenticated users to upload and execute arbitrary JSP files via 'viewedit.shtm' and Remote Code Execution. Exploit Usage Commands: Windows: $ sudo python WinScadaRCE.py Linu...
CVE-2024-28000
CVE-2024-28000 PoC This repository contains tools for exploiting the CVE-2024-28000 vulnerability affecting WordPress sites using the LiteSpeed Cache plugin. The included scripts automate the detection of exposed debug.log files and the exploitation of a privilege escalation vulnerability that...
CVE-2026-66751-Insufficient-Access-Controls-Allow-for-Unauthorized-Room-Deletion-Let-s-Chat-
Security Advisory: Insufficient Access Controls Allow for Unauthorized Room Deletion Let's Chat Assigned CVE ID: CVE-2026-66751 Summary DELETE /rooms/:room performs no authorization check beyond requiring a login. Any account can archive any room on the server, including private, password protect...
pfsense-security-research
Authenticated Arbitrary File Read in pfSense 2.8.0 via Diagnostics Web Interface CVE ID: CVE-2025-53392 Date: 2025-06-27 Author: Seth Kraft Vendor Homepage: https://www.netgate.com/ Vendor Changelog: https://docs.netgate.com/pfsense/en/latest/releases/ Software Link:...
Ph-n-t-ch-CVE-2024-40842-XProtectRemediatorDubRobber-Information-Leak-tr-n-macOS
CVE-2024-40842: XProtectRemediatorDubRobber Information Leak on macOS Overview CVE-2024-40842 is a local information disclosure vulnerability in Apple's XProtect Remediator on macOS, related to the module: XProtectRemediatorDubRobber The vulnerability stems from Apple's privileged security proces...
CVE-2024-0044
CVE-2024-0044/A-307532206 is a High severity vulnerability in the Android framework that allows attackers with adb access to run arbitrary code under the UID of arbitrary app. It was originally found by Tom Hebb from Meta Red Team X. You can found many articles on exploit this vulnerability on th...
red-kube
Red Team K8S Adversary Emulation Based on kubectl Red Kube is a collection of kubectl commands written to evaluate the security posture of Kubernetes clusters from the attacker's perspective. The commands are either passive for data collection and information disclosure or active for performing...
XeytanWin32-RAT
WARNING This is a buggy RAT, not completed, not stable. It still a "work in progress" application. Introduction Project created to kill some of my free time, It is not actively maintained. There are a lot of things to improve/fix, and it will take time to reach a stability on this project. Featur...
skype-log-viewer
skype-log-viewer Download and View Skype History Without Skype This program allows you to view all of your skype chat logs and then easily export them as text files. It correctly organizes them by conversation, and makes sure that group conversations do not get jumbled with one on one chats...
CVE-2026-0893
The AMI APTIOV BIOS contains a vulnerability where an attacker with local access can cause Exposure of Sensitive Information to an Unauthorized Actor . Successful exploitation may lead to information disclosure , privilege escalation , and further impacts on the Confidentiality, Integrity, and Av...
CVE-2025-58772
The AMI APTIOV BIOS contains vulnerabilities that allow local users to trigger a "Classic Buffer Overflow" (CWE-120). Successful exploitation of this flaw can result in buffer overflows , memory corruption , and arbitrary code execution , potentially impacting the system's Confidentiality, Integr...
CVE-2022-1175
CVE-2022-1175 Gitlab Stored XSS, can be set in an issue on a project, either your own or another users. Allows attacks such as creating & stealing a Personal Access Token PAT of anyone who visits an issue. PAT's can then provide full Gitlab API access as that user equivilent to a full account...
CVE-2026-77361
The obsidian-tc Model Context Protocol server (prior to version 1.3.1 ) contains a vulnerability where a mismatch between lexical vault-relative paths (used for ACL checks ) and resolved paths (used for containment checks) allows for ACL bypass . An attacker can use an out-of-band-planted symlink...
