CVE-2024-48990-PoC

PoC for CVE-2024-48990 in needrestart educational purposes only https://www.qualys.com/2024/11/19/needrestart/needrestart.txt How to run? Running ./start.sh will compile the fake importlib library and start a script that waits for needrestart to be executed by root. It will pop a shell afterwards...

cacti-rce-cve-2022-46169-vulnerable-application

Aplicación vulnerable de inyección de comandos en Cacti v1.2.22 CVE-2022-46169 Esta es una aplicación vulnerable para probar el exploit de la vulnerabilidad Cacti CVE-2022-46169. ¡ADVERTENCIA! Esta aplicación contiene vulnerabilidades de seguridad graves. ¡Úsela bajo su propio riesgo! Se recomien...

CVE-2026-92368

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...

CVE-2026-78683

A flaw was found in NLTK. This vulnerability allows arbitrary code execution due to unsafe deserialization, where data loaded from storage is converted back into active objects without adequate restrictions. When the TransitionParser component processes a model file, it fails to enforce safe...

CVE-2022-1388

F5-CVE-2022-1388-Exploit Exploit and Check Script for CVE 2022-1388 Usage bash / | | | || | / | |/ / \ / | | || || | | / /| | | || | ' / /'| |/' |' / /'' / /'| | / / \ V / \ V / | | | | | || ||| / / | /| | / / / / ||| | \ \ / \ / \ | /\ / /| | ./ /\ |/ /./ /./ / | |./ /| || || || | / / /...

CVE-2025-60751

CVE-2025-60751 PoC for CVE-2025-60751 Affected product: Geographiclib = v2.5.1 The full writeup article is available at https://zer0matt.blogspot.com/2026/05/cve-2025-60751-geographiclib-stack.html Description A stack buffer overflow occurs when GeoConvert receives a crafted input. The overflow...

EUVD-2026-89021

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...

Malicious code in express-javascript (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73e4909976d37fb7fb7dd30012d82bd882608df20716a824f1dc0efa074b5401 [email protected] impersonates the express package copying its description, author, contributors, repository, homepage, and dependency list...

Malicious code in express-nodejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9aea7dd76028cd443cf2f8d58fa5d8b3b28bb6db870f34d1cc6dad28db92fe93 [email protected] typosquats the express framework: package.json copies express's description, author TJ Holowaychuk, repository expressjs/express...

Malicious code in exprrdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bc1c956097cd13e80298a796a5026ebd91ece7c2ad53d226d3729f0b0b0ee9f3 Package 'exprrdd' copies express's metadata name-lookalike, description, author, contributors, repository, keywords, dependencies as cover for a...

Malicious code in exptred (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d91842ab3e5c93f5689a985b63f8de5455910d88d6815ee35f2d35d27f8a4cf7 npm package [email protected] is a typosquat of express: package.json copies express's description 'Fast, unopinionated, minimalist web framework', autho...

MAL-2026-17247 Malicious code in exptredd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288357063a28e85e649fc37c747c724bd06ce09c16624f7b2cad3dc854296035 npm package [email protected] impersonates the express package: package.json copies express's description, author, repository, contributors, and...

Malicious code in exptredd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 288357063a28e85e649fc37c747c724bd06ce09c16624f7b2cad3dc854296035 npm package [email protected] impersonates the express package: package.json copies express's description, author, repository, contributors, and...

Malicious code in exprdd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4cd27ec488e87cd2e26c940ac161033475731708a3f2ae629c4a138275b520f9 [email protected] impersonates the express framework — package name, description, author, contributors, repository, homepage, and keywords are copied...

CVE-2026-102566

CTranslate2 versions prior to 4.8.1 are vulnerable to a heap-based buffer overflow within the binary model loader. The root cause is a failure to validate the payload length against the allocated buffer size when processing model.bin files. An attacker can craft malicious model files with oversiz...

USN-8843-1 freeipmi vulnerabilities

It was discovered that FreeIPMI incorrectly handled certain malformed Fujitsu SEL long-text responses, leading to a stack-based buffer overflow. An attacker in control of a malicious IPMI device could possibly use this issue to cause FreeIPMI to crash, resulting in a denial of service, or possibl...

CVE-2026-26719

Description Summary A stored Cross‑Site Scripting vulnerability exists in xxl-job-admin JobInfoController.java where the addressList parameter accepts unsanitized URL‑encoded JavaScript. The payload is stored and later executed in users’ browsers, lead unauthorized actions. Affected Products...

Mintinstall-object-injection

TR El administrador de software de Linux Mint v 7.9.5/9 provoca la inyección de objetos y la ejecución de código arbitrario debido a una configuración incorrecta. EN El administrador de software de Linux Mint v 7.9.5/9 nos hace ejecutar inyección de objetos y código arbitrario debido a una...

CVE-2025-48384-poc

CVE-2025-48384-poc CVE-2025-48384 se presenta como una vulnerabilidad de resolución de enlace incorrecta seguimiento de enlaces en git. Específicamente, los nombres de archivo con retornos de carro se analizan incorrectamente en .git/config, e incluir un enlace simbólico para apuntar a un...

Code-27-Companion-Hub-Exploits

Code 27 3D Companion Hub Vulnerabilities CVE-2026-36027, CVE-2026-36028 The Code 27 3D Companion Hub is a physical desktop device that renders a custom AI character a "Codie" as an animated 3D companion. Users can upload or create any 3D model, and multimodal AI lets the character see its...