CVE-2026-23869

CVE-2026-23869 - Proof of Concept PoC Description This repository contains a Proof of Concept PoC for CVE-2026-23869 , a vulnerability affecting React Server Components before 19.2.5. The vulnerability allows an attacker to cause a significant CPU charge on the server making it non responsive for...

CVE-2026-52729

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on PUT/DELETE /action/id allow an authenticated user to modify or delete actions on any Layout. Exploitation requires the privile...

EUVD-2026-112085

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on PUT/DELETE /action/id allow an authenticated user to modify or delete actions on any Layout. Exploitation requires the privile...

CVE-2026-52729 Xibo: IDOR (Broken Object-Level Authorization) on PUT/DELETE /action/{id} Allows Arbitrary Layout Action Modification and Deletion

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on PUT/DELETE /action/id allow an authenticated user to modify or delete actions on any Layout. Exploitation requires the privile...

PT-2026-128247

Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to 4.4.3, missing access-control checks on PUT/DELETE /action/id allow an authenticated user to modify or delete actions on any Layout. Exploitation requires the privile...

PT-2026-115279

TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make the backend send arbitrary HTTP requests by supplying an unvalidated OpenAPI servers0.url in a user-defined action. Attackers holding a project API key or console admin login c...

UBUNTU-CVE-2026-22987

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: avoid dereferencing ERRPTR in tcfidrinfodestroy syzbot reported a crash in tcactinhw during netns teardown where tcfidrinfodestroy passed an ERRPTR-EBUSY value as a tcaction pointer, leading to an invalid...

CVE-2019-2310

Out of bound read would occur while trying to read action category and action ID without validating the action length of the Rx Frame body in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile,...

Exploit for CVE-2025-55182

CVE-2025-55182 POC for Next.js App-Router CVE-2025-55182 POC...

EUVD-2019-11952

Malware in sbrugna...

EUVD-2006-1628

Malware in sbrugna...

EulerOS 2.0 SP2 : polkit (EulerOS-SA-2019-2404)

According to the versions of the polkit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in polkit before version 0.116. The implementation of the polkitbackendinteractiveauthoritycheckauthorizatio n function in...