CVE-2026-93629

An organizer authentication vulnerability in Zimbra Collaboration Suite ZCS allows an unauthenticated email sender to insert calendar invitations attributed to another user. The email delivery path permits external invitations but does not verify that the message sender is authorized to use the...

CVE-2026-93629 Zimbra Collaboration Suite Calendar Processing Authentication Bypass via Forged iCalendar REQUEST Organizer Identity

An organizer authentication vulnerability in Zimbra Collaboration Suite ZCS allows an unauthenticated email sender to insert calendar invitations attributed to another user. The email delivery path permits external invitations but does not verify that the message sender is authorized to use the...

EUVD-2026-108965

An organizer authentication vulnerability in Zimbra Collaboration Suite ZCS allows an unauthenticated email sender to insert calendar invitations attributed to another user. The email delivery path permits external invitations but does not verify that the message sender is authorized to use the...

CVE-2026-93629

An organizer authentication vulnerability in Zimbra Collaboration Suite ZCS allows an unauthenticated email sender to insert calendar invitations attributed to another user. The email delivery path permits external invitations but does not verify that the message sender is authorized to use the...

IAM Proxy Component Compromise Information Disclosure

The vulnerability of the IAM Proxy component of the Identity & Access Management tool in Platform V IAM is related to synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

vvdecapp Component Buffer Overflow DoS

The vulnerability of the setBufferingPeriodSEI function in the vvdecapp VVdeC component is related to reading data beyond the buffer’s capacity. Exploiting this vulnerability could allow an attacker to cause a service failure or gain access to protected information...

Ascon.Pilot.WinService Authentication Bypass

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality, integrity, and accessibility o...

Ascon.Pilot.WinService Auth Bypass Code Execution

The vulnerability of the Ascon.Pilot.WinService component in the Pilot-BIM data management system is related to the lack of authentication for a critical function. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Directum Web Agent Code Execution

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

firecracker

Our mission is to enable secure, multi-tenant, minimal-overhead execution of container and function workloads. Read more about the Firecracker Charter here. What is Firecracker? Firecracker is an open source virtualization technology that is purpose-built for creating and managing secure,...

kong

Kong: The Agentic Reverse Engineer LLM orchestration for reverse engineering binaries What is Kong? Most tasks follow a linear relationship: the more difficult a task, the longer it usually takes. Reverse engineering and binary analysis is a task in which the actual difficulty is somewhat trivial...

CVE-2021-4034

CVE-2021-4034 polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. PoC If the exploit is working you'll get a root shell immediately: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall --shared -fPIC -o pwnkit.so pwnkit.c cc -Wall cve-2021-4034.c -o...

CVE-2026-67279

MikroTik RouterOS PoC Collection This repository contains proof-of-concept PoC scripts for several MikroTik RouterOS security issues researched and documented in 2026. The materials are intended for authorized security research, laboratory validation, and controlled testing only. This project is...

windows-kernel-exploits

windows-kernel-exploits Introduction windows-kernel-exploits Vulnerability List Security Bulletin KB Description Operating System CVE-2021-33739 Microsoft DWM Core Library Elevation of Privilege Vulnerability Windows 10, 20 CVE-2021-1732 Windows Win32k Elevation of Privilege Vulnerability Windows...

HoneypotBuster

Microsoft PowerShell module designed for red teams that can be used to find honeypots and honeytokens in the network or at the host. CodeExecution Execute code on a target machine using Import-Module. Invoke-HoneypotBuster HoneypotBuster is a tool designed to spot Honey Tokens, Honey Bread Crumbs...

CVE-2019-13051

Pi-Hole 4.3.2 Command Injection & PrivEsc CVE-2019-13051 Pi-Hole version 4.3.2 contains a patch to this vulnerability:https://github.com/pi-hole/AdminLTE/pull/974 A big thanks to the Pi-Hole dev team for their awesome project and for making it so easy to report this vulnerability! Executive Summa...

CVE-2026-43786

🔐 CVE-2026-43786 - LPE 🚨 macOS Local Privilege Escalation — Improper Entitlement Validation 📌 Overview CVE-2026-43786 is a local privilege-escalation vulnerability affecting Apple's macOS. The vulnerability is related to improper entitlement validation , potentially allowing a locally executing...

CVE-2026-58635-PoC

CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation Proof of concept for CVE-2026-58635 , a command-injection vulnerability in Windows Narrator Braille. A local authenticated user can abuse a writable BrlAPI parameter to make the privileged BRLTTY service execute an arbitrary...

CVE-2017-16778-Intercom-DTMF-Injection

Invoking DTMF Tones for Physical Access Grant on Fermax Lift Intercom System CVE-2017-16778 Special Mentions First and foremost, @dizijoyjoy for assisting on the demo set in order for a successful shoot. Special acknowledgement to Fermax for the prompt response to the security bug report on their...

dnsbin

dnsbin The request.bin of DNS request DNSBin is a simple tool to test data exfiltration through DNS and help test vulnerability like RCE or XXE when the environment has significant constraint. The project is in two parts, the first one is the web server and it's component. It offers a basic web U...