EUVD-2026-100523

VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string that QProcess::startconst QString& reparses into arguments through ProcessUtils::startDetached. The automatic path in...

CVE-2024-3660-PoC

CVE-2024-3660 – TensorFlow Keras Arbitrary Code Execution via Malicious Model Overview CVE-2024-3660 is an arbitrary code execution vulnerability in TensorFlow's Keras framework affecting versions \ --build-arg LPORT= \ -t tfimg . && \ containerid=$docker create tfimg && \ docker cp...

CVE-2021-24741

CVE-2021-24741 Multiple SQL Injection Unauthenticated in Support Board v 3.3.3 Description Support Board V 3.3.3 Multiple SQL Injection Vulnerability in Support Board Version 3.3.3 that allow remote unauthenticated attacker to execute arbitrary SQL commands via statuscode, department, userid,...

CVE-2020-14882

CVE-2020-14882 Deployment of Behinder Memory Shell As we all know, CVE-2020-14882 is an unauthenticated vulnerability that allows an attacker to execute arbitrary code on affected WebLogic Server instances. The publicly available PoCs bypass access using illegal characters and then execute comman...

vulnerabilities handled in Microsoft Developer Tools

Microsoft has identified vulnerabilities in various components of the Developer Tools, such as .NET and Visual Studio. Malicious actors can exploit these vulnerabilities, resulting in damages as described in the tables below. .NET: |------------------|------|-------------------------------------|...

CVE-2019-9791

Exploit chain for CVE-2019-9791 & CVE-2019-11708 against Firefox 65.0 Works against Firefox 65.0 on windows 64bit. CVE-2019-11708 part is taken from exploit by 0vercl0k: https://github.com/0vercl0k/CVE-2019-11708 The exploit uses CVE-2019-9791 to obtain read/write primitive in content process the...

CVE-2025-4190

CVE-2025-4190 — WordPress CSV Mass Importer ≤ 1.2 Arbitrary File Upload -purple 📌 Description The CSV Mass Importer plugin ≤ 1.2 for WordPress contains an Admin+ Arbitrary File Upload vulnerability. Due to improper validation of uploaded files, high-privilege users such as admin can upload...

EsFileExplorer-CVE-2019-6447

EsFileExplorer-CVE-2019-6447 Exploiting Android Vulnerability in ES File Explorer Vulnerability The ES file explorer was created by ES worldwide, which is a part of DO Global and is based in China. This ES file explorer is only available for use on mobile devices that run the Android operating...

CVE-2025-4403

CVE-2025-4403 Exploit Details Published : May 8, 2025 Updated : May 9, 2025 Severity : High CVSS Score: 9.8 CWE : CWE-434 - Unrestricted Upload of File with Dangerous Type Affected Versions : All versions from n/a through 1.1.6 CVSS Vector CVSS Version : 9.8 Vector String :...

CVE-2020-36603

CVE-2020-36603 The HoYoVerse formerly miHoYo Genshin Impact mhyprot2.sys 1.0.0.0 anti-cheat driver does not adequately restrict unprivileged function calls, allowing local, unprivileged users to execute arbitrary code with SYSTEM privileges on Microsoft Windows systems. The mhyprot2.sys driver mu...

grafanaExp

grafanaExp Exploit Grafana CVE-2021-43798 arbitrary file read vulnerability to automatically detect vulnerability, existing plugins, extract secret key, decrypt server database file, and output datasourrce info. Usage Provides exp and decode functionality. ➜ ./grafanaExp -h NAME: grafanaExp -...

Exch-CVE-2021-26855_Priv

Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability...

vulnerabilities present in Microsoft Office

Microsoft has fixed xxx vulnerabilities in various Office products, such as Word, Excel, Access, Outlook, Visio, SharePoint, and PowerPoint, as well as subcomponents like Shell, Azure Key Vault, and Click-to-Run. A malicious actor could exploit these vulnerabilities to cause a denial-of, gain...

CVE-2026-104340

Adobe FrameMaker is affected by a Heap-based Buffer Overflow vulnerability (CWE-122) that could lead to arbitrary code execution within the context of the current user. Exploitation of this vulnerability requires user interaction, specifically the opening of a malicious file. Adobe has released a...

CVE-2026-106625 Adobe Framemaker | Out-of-bounds Write (CWE-787)

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104341 Adobe Framemaker | Out-of-bounds Write (CWE-787)

Adobe Framemaker is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104342 Adobe Framemaker | Use After Free (CWE-416)

Adobe Framemaker is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-104341

Adobe FrameMaker is affected by an out-of-bounds write vulnerability (CWE-787) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, specifically when a victim opens a malicious file . Adobe has released a priority 3 security updat...

CVE-2026-104342

Adobe FrameMaker is affected by a Use After Free vulnerability (CWE-416) that could lead to arbitrary code execution within the context of the current user. Exploitation requires user interaction, specifically the opening of a malicious file. Adobe has released a security update to address this a...

CVE-2026-104344 Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)

Adobe Framemaker is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...