CVE-2026-80782

A flaw was found in the Magic Mouse Human Interface Device HID driver within the Linux kernel. When the hidinputconnect function fails to register an input device, the driver may continue to use a pointer to memory that has already been released. This use-after-free vulnerability can lead to syst...

CVE-2025-50472

CVE-2025-50472 ModelScope Ms-Swift ModelFileSystemCache Deserialization of Untrusted Data Remote Code Execution Vulnerability RCE PoC I uploaded a code repository containing a malicious .mdl file to ModelScope for testing purposes. It can be used directly during testing. The link is:...

CVE-2025-55182

🚨 CVE-2025-55182 — React2Shell CVE-2025-55182 is a critical Remote Code Execution RCE vulnerability affecting React Server Components RSC. 📌 Overview This vulnerability allows unauthenticated attackers to execute arbitrary code on vulnerable servers. The issue originates from unsafe deserializati...

CVE-2024-2876

CVE-2024-2876 Description Of Vulnerability: The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to SQL Injection via the ‘run’ function of the ‘IGESSubscribersQuery’ class in all versions up to, and...

CVE-2026-116098

A vulnerability exists in SteelRaven7 Ravenfield 25407073 within the RFL Custom Map Handler/RFLD Custom Map Handler component. Specifically, the cacheCoverPoints function is susceptible to deserialization via manipulation of input data. This flaw allows for remote exploitation of the attack. To r...

CVE-2026-116098 SteelRaven7 Ravenfield RFL Custom Map Handler/RFLD Custom Map cacheCoverPoints deserialization

A vulnerability was detected in SteelRaven7 Ravenfield 25407073. This vulnerability affects the function cacheCoverPoints of the component RFL Custom Map Handler/RFLD Custom Map Handler. Performing a manipulation results in deserialization. Remote exploitation of the attack is possible. The patch...

CVE-2026-5118

🔥 CVE-2026-5118 Divi Form Builder One hidden field. One changed value. Full access to the entire website. 🧨 What an Attacker Can Do? Capability| Impact ---|--- 🔑 Create admin account without login| Full Site Takeover 📦 Access WooCommerce customer data| Data Breach 💉 Edit plugin/theme files PHP|...

AWS-SAM-CLI-Vulnerabilities

AWS SAM CLI Vulnerabilities CVE-2025-3047 & CVE-2025-3048 This README provides a detailed analysis of two security vulnerabilities found in the AWS Serverless Application Model CLI AWS SAM CLI – CVE-2025-3047 and CVE-2025-3048 – along with the code-level issues and fixes. Both vulnerabilities...

CVE-2025-49113_exploit_cookies

CVE-2025-49113 - Roundcube Webmail Remote Code Execution Vulnerability Technical Overview CVE-2025-49113 is a critical insecure deserialization vulnerability in Roundcube Webmail that enables authenticated remote code execution. The vulnerability stems from improper handling of serialized PHP...

Vite-CVE-2025-30208-EXP

CVE-2025-30208 Detection Tool Vulnerability Analysis CVE-2025-30208 is an arbitrary file read vulnerability in the Vite development server. Attackers can read sensitive server files such as /etc/passwd or C:\windows\win.ini by constructing special paths e.g., @fs prefix. This tool supports...

http-vuln-cve2019-14322.nse

http-vuln-cve2019-14322.nse Nmap NSE script to detect CVE-2019-14322 of Pallets Werkzeug path traversal via SharedDataMiddleware mishandles drive names such as C: in Windows pathnames Description CVE-2019-14322 - A vulnerability was found in Pallets Werkzeug up to 0.15.4. It has been declared as...

CVE-2026-80805

A flaw was found in the Linux kernel's XFS filesystem. The xfsattr3leafverifyentry function fails to validate an attribute entry pointer before accessing its fields. A local attacker could exploit this by crafting a malicious attribute index nameidx to cause an out-of-bounds read. This could lead...

CVE-2023-45828

CVE-2023-45828 RumbleTalk Live Group Chat = 6.1.9 - Missing Authorization via handleRequest Description: The RumbleTalk Live Group Chat plugin for WordPress is vulnerable to unauthorized access of data, modification of data, and loss of data due to a missing capability check on the handleRequest...

CVE-2022-31901

CVE-2022-31901 Denial Of Services DOS in Notepad++x86 in 8.4.3 and before. Description Vulnerability triggering, via opening two specially crafted text files e.g. first.txt & second.txt as input to notepad++. As an illustrative example below, as of 11/07/2022, latest version of Notepad++x86 is...

CVE-2025-30216-PoC

PoC for CVE-2025-30216: CryptoLib Heap Overflow Vulnerability Overview CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station...

DEBIAN-CVE-2026-116096

A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access...

CVE-2026-116096

A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function listpocketttsstateslots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access...

CVE-2026-116095

A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jpegturbo::decodejpegrgb of the file crates/multimodal/src/jpegturbo.rs of the component llm-multimodal. The manipulation leads to uncontrolled memory allocation. The attack can be initiate...

CVE-2023-35078

CVE-2023-35078 Exploit Tool ██████╗ ███╗ ██╗███████╗███████╗ ██████╗ ██╔═████╗████╗ ██║██╔════╝██╔════╝██╔════╝ ██║██╔██║██╔██╗ ██║███████╗█████╗ ██║ ████╔╝██║██║╚██╗██║╚════██║██╔══╝ ██║ ╚██████╔╝██║ ╚████║███████║███████╗╚██████╗ ╚═════╝ ╚═╝ ╚═══╝╚══════╝╚══════╝ ╚═════╝ + CVE-2023-35078 - Ivan...

CVE-2026-20253

Splunk Enterprise — CVE-2026-20253 Training Lab Splunk Enterprise 10.2.3 · PostgreSQL recovery sidecar · CWE-306 Missing Authentication for Critical Function An authorized, self-contained reproduction that models the real advisory for defensive education. It does not ship Splunk's proprietary cod...