CVE-2026-112302 kiwilan php-archive Extraction ArchiveZip.php extract path traversal

A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file src/Readers/ArchiveZip.php of the component Extraction. This manipulation causes path traversal. The attack is possible to be carried out remotely. The exploit has been ma...

CVE-2026-112302

A path traversal weakness exists in kiwilan php-archive up to version 2.3.02 . The vulnerability is located in the ArchiveZip::extract function within the src/Readers/ArchiveZip.php file of the Extraction component. This flaw allows for remote attacks. Public exploits for this vulnerability are a...

CVE-2026-29041

CVE-2026-29041 — Authenticated RCE via Unrestricted File Upload in Chamilo LMS 1.11.32 -yellow?style=for-the-badge Authenticated Remote Code Execution in Chamilo LMS 1.11.32 via improper file upload validation in the ckuploadimage AJAX endpoint. A low-privileged student can upload a PHP web shell...

CVE-2026-20253

🚨 CVE-2026-20253 - Critical Splunk Enterprise Unauthenticated File Creation Vulnerability Unauthenticated arbitrary file creation and truncation vulnerability affecting Splunk Enterprise and Splunk Cloud Platform. 📖 Executive Summary CVE-2026-20253 is a critical vulnerability in Splunk Enterprise...

CVE-2026-43499

👻 CVE-2026-43499 — GhostLock 15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros GhostLock is a high-severity Use-After-Free UAF vulnerability in the Linux Kernel rtmutex subsystem. The flaw originates from incorrect waiter cleanup during Priority Inheritance PI...

CVE-2024-8275

CVE-2024-8275 CVE-2024-8275 is a critical SQL injection vulnerability discovered in the WordPress plugin The Events Calendar. This vulnerability affects versions up to and including 6.6.4. The issue arises from insufficient escaping of the 'order' parameter in the tribehasnextevent function...

CVE-2024-37383-exploit

Exploit Title: Roundcube mail server exploit for CVE-2024-37383 Stored XSS Google Dork: Exploit Author: AmirZargham Vendor Homepage: Roundcube - Free and Open Source Webmail Software Software Link: Releases · roundcube/roundcubemail Version: Roundcube client version earlier than 1.5.6 or from 1.6...

Exploit for Interpretation Conflict in Wordpress

🚀 CVE-2026-63030 + CVE-2026-60137 ⚡ WordPress Pre-Auth RCE Envi...

CVE-2024-42861

CVE-2024-42861 The DOS attack against IEEE 802.1AS standardgPTP protocol CVE ID CVE-2024-42861 PRODUCT IEEE 802.1AS standard VERSION IEEE 802.1AS-2020, IEEE 802.1AS-2010 PROBLEM DOS attack DESCRIPTION When a port of a device with IEEE 802.1AS enabled receives two PdelayReq messages with different...

CVE-2026-112301 orbitale imagemagick-php Command.php font os command injection

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been...

EUVD-2026-104602

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been...

CVE-2026-112301 orbitale imagemagick-php Command.php font os command injection

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been...

CVE-2026-112301

A security flaw has been discovered in orbitale imagemagick-php up to 3.3.5. Affected by this issue is the function Command::font of the file src/Command.php. The manipulation of the argument fontFile results in os command injection. The attack can be executed remotely. The exploit has been...

CVE-2026-112301

A security flaw exists in orbitale imagemagick-php up to version 3.3.5 . The vulnerability is located in the Command::font function within the src/Command.php file. Improper handling of the fontFile argument allows for remote OS command injection . Public exploits for this vulnerability are avail...

CVE-2026-67206

CVE-2026-67206 - Wolf CMS -u -p python exploit.py http://127.0.0.1:8080/ -u ad...

libsafe-CVE-2005-1125

Libsafe only works on 32-bit architectures 1. make build: Builds Libsafe, compiles the proof of concept exploit 'thread', and compiles the library interposition code 'interpose.so'. make random MAXDELAY=x: Randomizes the interposed delays in 'interpose.so' with miximum delay MAXDELAY per...

cve-2025-55182-react2shell-analysis

CVE-2025-55182 — React2Shell Vulnerability Analysis Overview This project presents a technical analysis of CVE-2025-55182 React2Shell , a critical remote code execution vulnerability affecting React Server Components. The objective of this research was to understand the vulnerability, analyze its...

CVE-2020-15215-Discord-POC

Discord Electron ISO Boundary Validation PoC Scope This repository is a proof-of-concept validation harness for Electron boundary hardening in Discord-style desktop architectures. It models renderer/main-process separation, preload bridge policy, IPC channel exposure, navigation controls, and...

ubl-itel-s23

Unlock Bootloader — Itel S23 S665L / Unisoc T606 Guide to unlock the bootloader on the Itel S23 S665L using the CVE-2022-38694 exploit on the Unisoc T606 UMS9230 chipset. Device Info Property| Value ---|--- Brand| Itel Model| S665L S23 Android| 12 SDK 31 Build|...

Mysql_CVE-2024-27766

Exploit Reproduction Guide affected product version MariaDB 11.1 This guide provides step-by-step instructions to reproduce a User-Defined Function UDF attack on a database system. Please note that this exploit may work on some systems, but it might not function correctly on 64-bit architectures ...