CVE-2026-63277

A flaw was found in LibreOffice. When linking spreadsheet cell ranges to external data sources in Calc, a document can specify an external Java database driver. By convincing a user to open a specially crafted document, a remote attacker can force the application to download and execute untrusted...

SUSE CVE-2019-25777

YAML versions before 1.27001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob document names a package and a symbol, and supplies the value assigned to it. Nothing restricts the name, so the target can be @INC or...

CVE-2022-20186_CTXZ

Exploit for CVE-2022-20186 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in January 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

CVE-2021-40870

CVE-2021-40870 Exploitation An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal. Modules need to Install To run this project...

Reproduce-CVE-2024-21513

Reproduce-CVE-2024-21513 Overview This project demonstrates the vulnerability CVE-2024-21513 in the langchain-experimental package, specifically in versions =0.0.15 and 0.0.21. The vulnerability allows arbitrary code execution via the VectorSQLDatabaseChain component when retrieving values from t...

FreeRDP-Out-of-Bounds-Read-CVE-2024-32459-

FreeRDP-Out-of-Bounds-Read-CVE-2024-32459- The FreeRDP-Out-of-Bounds-Read-CVE-2024-32459 vulnerability is a security flaw discovered in FreeRDP, an open-source program used for implementing the Remote Desktop Protocol RDP This vulnerability arises from input processing weaknesses, allowing an...

CVE-2025-45778

CVE-2025-45778 CVE-2025-45778: Authenticated Stored XSS. An authenticated stored cross-site scripting XSS vulnerability in The Language Sloth Web Application v1.0 allows attackers to execute arbitrary JavaScript or HTML code via injecting a crafted payload into the "Description" text field when...

CVE-2020-24972

So CVE-2020-24972 spans from another cve in actually. I don't remember the cve that got designated but it has to do with platformpluginpath cmdline option from qt. So in essence the problem comes from using qt, persee the option platformpluginpath . "This parameter is supposed to contain a...

cve-2024-4367-PoC-fixed

cve-2024-4367-PoC-fixed PDF.js is a JavaScript-based PDF viewer maintained by Mozilla. This vulnerability allows an attacker to execute arbitrary JavaScript code immediately after opening a malicious PDF file. This affects all Firefox users 126, as Firefox uses PDF.js to display PDF files, but al...

CVE-2026-88392

Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local. This allows an attacker to execute arbitrary code...

2017-11882_Generator

CVE-2017-11882 A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. 2017-11882Generator This is ...

CVE-2021-41078

CVE-2021-41078 nameko Arbitrary code execution due to YAML deserialization NVD Description Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deserializing the config file. Demo Set Up 1. Build an image from a Dockerfile docker build -t cve-2021-41078 . 2. Run pyth...

CVE-2020-15778-SCP-Command-Injection-Check

CVE-2020-15778 – Vulnerabilidad de Inyección de Comandos en OpenSSH SCP Script de Detección Acerca de CVE-2020-15778 es una vulnerabilidad de inyección de comandos descubierta en la utilidad scp proporcionada por OpenSSH versiones ≤ 8.3p1. El problema permite a un atacante ejecutar comandos...

SpringBreakVulnerableApp

Spring Break Vulnerable Application This is a vulnerable application to test the exploit for the Spring Break vulnerability CVE-2017-8046. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended using a backed-up and sheltered environment su...

CVE-2023-0669

CVE-2023-0669 GoAnywhere MFT Deserialization - Je Yiuwai's Blog CVE-2023-0669 CVE-2023-0669 is a GoAnywhere MFT deserialization vulnerability. Due to the deserialization of an arbitrary attacker-controlled object, a pre-authenticated command injection vulnerability exists in the License Response...

CVE-2018-15961

CVE-2018-15961 Unrestricted file upload in Adobe ColdFusion POST /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm HTTP/1.1 Host: coldfusion:port User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/62.0.3202.9 Safari/537.36 Content-Type:...

CVE-2024-0039-Exploit

CVE-2024-0039-Exploit Description Python script for exploiting CVE-2024-0039: arbitrary code execution on vulnerable Android devices. WARNING : This code is intended for educational and constructive purposes only, on the side of good, so to speak! Usage Run the script with the necessary arguments...

CVE-2019-12594

CVE-2019-12594 This is a PoC for CVE-2019-12594, a vulnerability in DOSBox 0.74-2. Launching a calculator on the host from DosBox 0.74-2 The PoC for this vulnerability has been tested with the following configuration: DOSBox 0.74-2 Debian 10 amd64 Libc6 2.28-10...

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC The vulnerability allows an attacker with network access to an Erlang/OTP SSH server to execute arbitrary code without prior authentication. Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to...

CVE-2026-15718-who-put-ptrs-in-my-wasm

CVE-2026-15718 — who put ptrs in my wasm Proof-of-concept exploit chain for CVE-2026-15718 , a missing-sync miscompilation in Mozilla SpiderMonkey's WebAssembly baseline compiler "JavaScript: WebAssembly" component. A single zero-trip array.fill yields a fakeobj primitive; the chain escalates to...