EUVD-2026-102075

A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse the SYSTEM service's within TotalAV to execute arbitrary code as NT AUTHORITY\SYSTEM...

CVE-2026-110746

A local privilege escalation vulnerability exists in TotalAV that allows an unprivileged local user to execute arbitrary code as NT AUTHORITYSYSTEM . The root cause is the ability for an attacker to forge the gRPC IPC authentication token by loading IPC.dll and abusing the SYSTEM service within t...

CVE-2025-2783

Chromium CVE-2025-2783: Sandbox Escape & Full-Chain RCE Exploit This repository contains a full-chain exploit implementation for CVE-2025-2783. The vulnerability resides in Chromium's Ipcz communication layer, allowing an attacker to achieve sandbox escape and arbitrary code execution from a...

Python-CVE-2020-25213

Python-CVE-2020-25213 Python Interactive Exploit for WP File Manager Vulnerability. The File Manager wp-file-manager plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php...

EUVD-2026-102072

A vulnerability has been identified in Siemens Software Center All versions. The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application searches,...

CVE-2026-110936

A vulnerability has been identified in Siemens Software Center All versions V4.0.9.8. The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application...

CVE-2026-110936

A vulnerability exists in Siemens Software Center (all versions) because the application loads dynamic-link libraries (DLLs) from an uncontrolled search path . This flaw allows an authenticated local attacker to place a specially crafted DLL in a searched directory, potentially leading to arbitra...

CVE-2022-24934

CVE-2022-24934 Vulnerability Overview WPS Office's updater wpsupdate.exe reads a custom update server address from the registry HKEYCURRENTUSER, downloads a custom update program, and executes it, leading to arbitrary code execution. Affected Versions WPS Office versions less than or equal to...

CVE-2023-40031

CVE-2023-40031 Analysis and Reproduction of notepad++ Heap Buffer Overflow Vulnerability CVE-2023-40031 Vulnerability Overview Notepad++ is a well-known open-source code editor that runs on Windows and supports multiple programming languages. Recently, security researchers examined Notepad++ and...

CVE-2026-84659

A flaw was found in the Jenkins Script Security Plugin. This vulnerability allows an attacker to bypass security restrictions by disabling the global script sandbox. By exploiting a missing permission check through Stapler data binding, an attacker can execute arbitrary code, potentially...

Log4shell

Igloo Corporation Won Chi-hyun Log4shell Analysis Report Log4shell CVE-2021-44228 Log4j is a free and open-source Java-based logging utility by the Apache Software Foundation, capable of logging various Java-based services. It uses JNDI Lookup to reference data and objects discovered via JNDI,...

CVE-2025-55182

CVE-2025-55182 This repository contains a PoC reproduction of CVE-2025-55182 , a critical security vulnerability in React Server Components RSC that allows unauthenticated arbitrary code execution. Description The vulnerability exists in how React Server Components deserialize "Server Actions" fr...

CVE-2025-65754

CVE-2025-65754 : Stored XSS in Algernon 1.17.4 Description Algernon v1.17.4 is affected by a Cross-Site Scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload into a filename. Affected Project : Algernon - 1.17.4 Project maintainer : Alexander F. Rødseth...

libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...

CVE-2019-7609

CVE-2019-7609 Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer https://nvd.nist.gov/vuln/detail/CVE-2019-7609 CVE-2019-7609 This vulnerability is a Prototype Pollution vulnerability found in Kibana. Exploiting this vulnerability can lead ...

CVE-2023-30547

CVE-2023-30547 Vulnerability description vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException...

CVE-2025-66837

CVE-2025-66837 Malicious File Upload Description A file upload vulnerability in ARIS allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware CVSS Score: 6.8 Medium Attack Type Remote Authenticated Affected Versions Versions before 10.0.23.0.3587512 Discovered By: Yazan...

CVE-2023-46980

CVE-2023-46980 An issue in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter. Additional Information Video POC Link On YT ; https://youtu.be/3Mz2lSElg7Y Vulnerability Type Incorrect Access...

CVE-2024-44346

CVE Disclosure: CVE-2024-44346 Date: 13-09-2024 Summary A vulnerability was identified in Tosibox tbsetup.exe version 4.0.0.0 , which could allow local privilege escalation . This issue has been assigned the identifier CVE-2024-44346 .The vendor has released an advisory with further details and...

CVE-2024-10930

CVE Disclosure: CVE-2024-10930 Public Disclosure of CVE-2024-10930 Date: 12-02-2025 Summary A vulnerability was identified in Carrier product E20-BLK416X.EXE version 4.16, which could allow local privilege escalation. This issue has been assigned the identifier CVE-2024-10930 .The vendor will...