CVE-2023-38831

CVE-2023-38831 PoC Proof Of Concept This is an easy to use exploit for CVE-2023-38831, a vulnerability that affects WinRAR versions before 6.23. An exploitable vulnerability has been identified in RARLabs WinRAR versions prior to 6.23. This vulnerability enables attackers to execute arbitrary cod...

CVE-2023-36168

CVE-2023-36168 An issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component Exploit Title: AVG Anti Spyware 7.5 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.avg.com Software...

CVE-2026-103831 Insecure deserialization in the TrueLayer Magento 2 plugin

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

CVE-2026-103831

The TrueLayer Magento 2 plugin contains an insecure deserialization vulnerability in the Psr16CacheAdapter component. The root cause is the use of PHP's native unserialize() function without restricting allowed classes when retrieving data from the cache. An attacker with the ability to write man...

EUVD-2026-93363

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

CVE-2026-103831 Insecure deserialization in the TrueLayer Magento 2 plugin

CVE-2026-103831: Insecure deserialization vulnerability in the Psr16CacheAdapter component of the TrueLayer Magento 2 Plugin, due to the use of PHP's native unserialize function without restrictions on the classes allowed when retrieving data stored in the cache. An attacker who already has the...

adobe-flash-cve2018-15982

Adobe Flash CVE-2018-15982 This script creates a swf payload for CVE-2018-15982, which is based off of the PoC from https://github.com/smgorelik/Windows-RCE-exploits. The vulnerability was discovered by Chenming Xu and Ed Miles of Gigamon ATR. The vulnerability is a use-after-free flaw enabling...

Security Bulletin: Due to use of QOS.CH logback, IBM Cloud Pak System is affected by server-side request forgery and arbitrary code execution

Summary Due to use of QOS.CH logback IBM Cloud Pak System is affected by server-side request forgery and arbitrary code execution CVE-2024-12801, CVE-2024-12798. Those issues were addressed by IBM Cloud Pak System v2.3.6.2. Vulnerability Details CVEID:CVE-2024-12801 DESCRIPTION: Server-Side Reque...

CVE-2025-52122

CVE CraftCMS Freeform CraftCMS Freeform contains an SSTI vulnerability, resulting in arbitrary code injection for all users that have access to editing a form submission title. Vulnerable versions are v5.0.0 test % set form = freeform.form'pentest' % % if form % form.render % else % Form not foun...

CVE-2019-9791

Exploit chain for CVE-2019-9791 & CVE-2019-11708 against Firefox 65.0 Works against Firefox 65.0 on windows 64bit. CVE-2019-11708 part is taken from exploit by 0vercl0k: https://github.com/0vercl0k/CVE-2019-11708 The exploit uses CVE-2019-9791 to obtain read/write primitive in content process the...

MSDT_CVE-2022-30190

MSDTCVE-2022-30190 This Repository Talks about the Follina MSDT from Defender Perspective Index About Timeline Understanding the Exploit List of IOCs Detection Strategy Testing and Researching Mitigation Plans References About The bug is a Microsoft Windows Support Diagnostic Tool MSDT remote cod...

CVE-2022-0847-Exploit-Implementation

CVE-2022-0847-Exploit-Implementation This is a POC showing how to pop a reverse bash shell for arbitrary code execution on a foreign machine using CVE-2022-0847, "Dirty Pipe Exploit". This vulnerability only affects Linux kernel versions 5.8 or newer but was patched in versions 5.16.11, 5.15.25,...

CVE-2024-21378

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🛡️ CVE-2024-21378...

Security update for docker-stable

This update for docker-stable fixes the following issues: CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

SUSE-SU-2026:4535-1 Security update for docker-stable

This update for docker-stable fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

Security update for docker-stable

This update for docker-stable fixes the following issues: CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

SUSE-SU-2026:4533-1 Security update for docker-stable

This update for docker-stable fixes the following issues: - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header bsc1260279. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad...

Moodle-authenticated-RCE

Moodle 4.4.0 - Authenticated Remote Code Execution CVE-2024-43425 Exploit CVE: CVE-2024-43425 Affected Versions Moodle 4.4 to 4.4.1 Moodle 4.3 to 4.3.5 Moodle 4.2 to 4.2.8 Moodle 4.1 to 4.1.11 Description This exploit targets an authenticated Remote Code Execution RCE vulnerability in Moodle...

Mintinstall-object-injection

TR Linux mint yazılım yöneticisi v 7.9.5/9 yanlış yapılandırmadan dolayı obje enjeksiyonu ve keyfi kod çalıştırmamıza neden olmaktadır. EN Linux mint software manager v 7.9.5/9 causes us to execute object injection and arbitrary code due to incorrect configuration mintinsall TR Mint yazılım...

POC-CVE-2025-24813

CVE-2025-24813 Apache Tomcat RCE PoC Proof of Concept PoC exploiting CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization whe...