1326049 matches found
CVE-2026-120208 libheif 1.18.0 before 1.23.3 Heap Buffer Overflow via unci Mixed-Interleave Decoder
libheif 1.18.0 before 1.23.3 contains a heap-based buffer overflow vulnerability in uncdecodermixedinterleave::processTile that allows attackers to write out of bounds by supplying chroma components with unequal bit depths. Attackers can craft a HEIF file declaring, for example, 16-bit Cb and 8-b...
CVE-2026-120208
The libheif library (versions 1.18.0 before 1.23.3) is vulnerable to a heap-based buffer overflow in the unc_decoder_mixed_interleave::processTile() function. The flaw is caused by the improper handling of color components with unequal bit depths during the processing of uncompressed images. An a...
EUVD-2026-114724
ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attackers can store a template via MockController::add with escaped parentheses that mockjs evaluates with eval, then trigger...
CVE-2026-120203
The software ShowDoc versions 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature . Authenticated users can execute shell commands by storing a template via MockController::add using escaped parentheses, which the mockjs engine evaluates using eval(). The command is th...
CVE-2026-120203 ShowDoc 2.8.14 before 3.9.6 Code Injection via Mock Templates
ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attackers can store a template via MockController::add with escaped parentheses that mockjs evaluates with eval, then trigger...
CVE-2026-120203 ShowDoc 2.8.14 before 3.9.6 Code Injection via Mock Templates
ShowDoc 2.8.14 before 3.9.6 contains a code injection vulnerability in its Mock feature that allows authenticated users to execute shell commands through mockjs templates. Attackers can store a template via MockController::add with escaped parentheses that mockjs evaluates with eval, then trigger...
CVE-2026-55200
Security Report: CVE-2026-55200 š General Description CVE-2026-55200 is a critical heap-based buffer overflow vulnerability dynamic memory corruption affecting the libssh2 library in versions up to 1.11.1. It allows a malicious SSH server to compromise vulnerable clients that connect to it. ā”...
CVE-2024-4577-RCE-EXP
TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP and POC CVE-2024-4577-RCE-EXP CVE-2024-4577 PHP CGI Remote Code Execution Vulnerability on Windows Platform CVE-2024-4577 PHP CGI Remote Code Execution Vulnerability on Windows Platform RCE EX...
Apache-Flink-Dashboard-rec
Apache-Flink-Web-Dashboard-RCE Apache Flink Web Dashboard RCE...
react2shell-CVE-2025-55182
React2Shell Exploit CVE-2025-55182 Python exploit for Next.js React Server Components RCE vulnerability with HTTP/HTTPS support. š Quick Start Clone & run git clone https://github.com/BrianLopezM99/react2shell-CVE-2025-55182.git cd react2shell-CVE-2025-55182 python3 exploitreact2shell.py "" š Usa...
CVE-2025-24813-Exploit
CVE-2025-24813-Exploit Apache Tomcat Remote Code Execution RCE Exploit - CVE-2025-24813 š Apache Tomcat RCE Exploit - CVE-2025-24813 š„ Exploit & Detection Tool for Apache Tomcat RCE CVE-2025-24813 This repository contains a PoC Proof of Concept exploit for the Apache Tomcat Remote Code Execution...
redamon
Unmask the hidden before the world does RedAmon is an open-source, self-hosted AI penetration testing framework that maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens pull requests that fix what it finds. From first packet to...
CVE-2025-55182
CVE-2025-55182 - React2Shell React Server Components / Next.js Pre-Authentication Remote Code Execution Property| Value ---|--- CVE ID| CVE-2025-55182 CVSS| 10.0 Critical CWE| CWE-502: Deserialization of Untrusted Data Type| Pre-Auth RCE Affected Versions Component| Affected Versions ---|--- Reac...
CVE-2018-19276
CVE-2018-19276 OpenMRS Insecure Object Deserialization RCE From https://talk.openmrs.org/t/critical-security-advisory-cve-2018-19276-2019-02-04/21607 Insecure object deserialization allows Arbitrary Code Execution without needing to log in. IP restrictions on Webservices module do not prevent thi...
parquet-avro-rce
This repository does not have a README...
asrockploit
arbitrary code execution with CVE-2020-15368...
CVE-2020-35682
CVE-2020-35682 SD-91948: CVE-2020-35682: Authentication Bypass Vulnerability during SAML login in ServiceDesk Plus. As described by ManageEngine. If the target ServiceDesk Plus 11134 installation has SAML login enabled and you have credentials to a low privilege user then you can escalate to...
themida-unmutate
themida-unmutate A Python 3 tool to statically deobfuscate functions protected by Themida, WinLicense and Code Virtualizer 3.x's mutation-based obfuscation. The tool has been tested on Themida up to version 3.1.9. It's expected to work on WinLicense and Code Virtualizer as well. A Binary Ninja...
CVE-2022-22963-Exploit
CVE-2022-22963 Exploit This repository contains a Rust-based exploit for the CVE-2022-22963 vulnerability found in Spring Cloud Function versions 3.1.6, 3.2.2, and older unsupported versions. The vulnerability allows remote code execution and access to local resources through a specially crafted...
CVE-2026-28609-matroska-pcm-oob
CVE-2026-28609 ā Matroska PCM Out-of-Bounds Write Proof-of-concept, instrumented reproduction harness, and technical write-up for CVE-2026-28609, an out-of-bounds write in Android's MatroskaExtractor reachable via a crafted WebM file with a big-endian PCM audio track. At a glance CVE ID:...