CVE-2026-17497

NoteGen before 0.32.0 allows arbitrary OS command execution via the Tauri shell plugin shell:allow-execute for bash, python, and python3 with arbitrary arguments in the default desktop capabilities. JavaScript in the app’s webview can invoke plugin:shell|execute to run attacker-controlled command...

GHSA-F8MX-CWFH-7HR2 TShock allows chat while not fully connected, possible ban evasion

This issue was reported to TShock by @ohayo, but was found by the Discord user by the name of sofurry.com. Please note that this user does not own this domain on the internet, just the discord handle. TShock overrides certain Terraria vanilla systems, including chat, and the connection handling,...

Bird Chat 1.61 Denial Of Service Exploit

Exploit for unknown platform in category dos / poc ======================================== Bird Chat 1.61 Denial Of Service Exploit ======================================== / Bird Chat 1.61 - Denial Of Service - Proof Of Concept Coded by: Donato Ferrante / import java.net.Socket; import...

Michael Sandrof IrcII 4.4-7 - Remote Buffer Overflow

Michael Sandrof IrcII 4.4-7 - Remote Buffer Overflow // source: https://www.securityfocus.com/bid/1046/info IrcII is a well-known Internet Relay Chat IRC client for unix. Version 4.4-7 and possibly previous versions are known to be vulnerable to a buffer overflow condition in their direct...