vvdecapp Heap Buffer Overflow DoS

The vulnerability of the isRefScaled function in the vvdecapp VVdeC component relates to reading data beyond the buffer limit. Exploiting this vulnerability could allow an attacker to cause a service failure or gain access to protected information...

tridentpci_probe Heap Buffer Overflow DoS

The vulnerability of the tridentpciprobe function in the drivers/video/fbdev/tridentfb.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-121682

The system control service on affected Kiloview E3 NDI encoder firmware fails to sanitize the hostname parameter accepted by its device naming endpoint, passing it unquoted into a shell command. An authenticated web user with access to this function can embed characters to execute arbitrary...

vvdec Coding Structure Buffer Overflow DoS

The vulnerability of the vvdec::CodingStructure::getColInfovvdec::Position decoder vvdecapp VVdeC function is related to the occurrence of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143091)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143091 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix two unsafe bare decodes in decodelockers decodelockers in clslockclient.c contains t...

dhcpcd parse_option() DoS

The vulnerability of the parseoption function in the DHCP server dhcpcd is related to the use of pointers. Exploiting this vulnerability could allow an attacker to trigger a service failure...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143032)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143032 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception pat...

CVE-2018-13797

node-macaddress Retrieve MAC addresses in Linux, OS X, and Windows. A common misconception about MAC addresses is that every host had one MAC address, while a host may have multiple MAC addresses – since every network interface may have its own MAC address. This library allows to discover the MAC...

CVE-2025-68055-poc

CVE-2025-68055 Authenticated SQL injection in Hydra Booking Plugin get function, Hydra Booking hardcodes user input directly into the raw sql request instead of using prepare to sanitize input, leading to Time-Based Blind SQL injection. Exploit A simple run command as such will tell you whether o...

CVE-2025-32432

CVE-2025-32432 - Craft CMS Unauthenticated RCE PoC Working proof-of-concept for CVE-2025-32432 , an unauthenticated remote code execution vulnerability in Craft CMS versions up to and including 5.6.16 also affects 4.x and 3.x trees on equivalent code paths. Search keywords: CVE-2025-32432, Craft...

CVE-2023-38831

Detection Logic for CVE-2023-38831 WinRAR Exploit This repository contains a detection logic for CVE-2023-38831 WinRAR ZIP file spoofing / double-extension exploit with raw queries / code blocks and ETW-specific provider names + Event IDs. A vulnerable version of WinRAR 6.23 on the target system...

CVE-2025-67246

CVE-2025-67246 Vulnerability Title :LuDaShi Incorrect Access Control Affected versions :Less than 6.1026.4505.112 Discovery time :December 2, 2025 Discoverer :ZhouRui Analysis Report : LuDaShi is a well-known free system utility software that provides free hardware authentication, computer mobile...

CVE-2025-40019-POC

proof of concept for CVE-2025-40019 CVE-2025-40019 is the Encrypted Salt-Sector Initialization Vector mechanism crypto/essiv.c which has insufficient validation of Associated Authentication Data AAD length relative to the Initialization Vector IV size, leading to out-of-bounds memory access. The...

cve-2025-55182-scanner

CVE-2025-55182 / CVE-2025-66478 Vulnerability Scanner React Server Components Flight Protocol Remote Code Execution Detection Tool Executive Summary This scanner identifies systems potentially vulnerable to CVE-2025-55182 React and CVE-2025-66478 Next.js, critical unauthenticated remote code...

CVE-2019-9053-working-

CVE-2019-9053-working script- CMS Made Simple 2.2.10 - SQL Injection . Actual working version Updated the script to work with latest python versions Added Exception Handling for each function You can also calibrate time.sleep inside the exception handling blocks depending on response and connecti...

CVE-2026-8181

CVE-2026-8181 Proof of Concept Research • Validation • Security Testing "roses a red, violet are blue, i think i just shat my pant thinking about you. rizz" CVE Overview Field| Value ---|--- CVE ID| CVE-2026-8181 Type| Authentication Bypass Impact| Privilege Escalation / Full Site Takeover Attack...

CVE-2024-40110

Poultry Farm Management System v1.0 - RCE Exploit Vulnerability Type Unauthenticated File Upload with Remote Code Execution Description The Poultry Farm Management System v1.0 contains a critical vulnerability in the product upload functionality. The application fails to properly validate and...

CVE-2026-114574 massCodeIO massCode Local HTTP Service index.ts information disclosure

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-114574 massCodeIO massCode Local HTTP Service index.ts information disclosure

A security vulnerability has been detected in massCodeIO massCode 5.10. Affected is an unknown function of the file src/main/api/index.ts of the component Local HTTP Service. Such manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been...

CVE-2026-114574

A security vulnerability exists in massCodeIO massCode 5.10 within the Local HTTP Service component. Specifically, an unknown function in the file src/main/api/index.ts allows for information disclosure via remote manipulation. The documents indicate that an exploit has been disclosed publicly an...