CVE-2026-59264

The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

CVE-2026-90628

Apache OpenOffice versions through 4.1.16 are vulnerable to a stack-based buffer overflow (CWE-121) due to uncontrolled memory access in the PDF export code . A crafted CFF font can trigger this overflow, potentially resulting in a program crash, memory corruption, or arbitrary code execution. Re...

CVE-2026-90628 Apache OpenOffice: Stack overflow in CFF hint handling

An uncontrolled memory access in the PDF export code of Apache OpenOffice versions through 4.1.16 allows a crafted CFF font to cause a stack overflow problem, causing program crash or memory corruption, or even running other code. Users are recommended to upgrade to version 4.1.17, which fixes th...

CVE-2026-90624

Apache OpenOffice versions through 4.1.16 are vulnerable to an out-of-bounds memory write due to an unchecked memory access in the PDF import code . A crafted PDF file can trigger this vulnerability, potentially resulting in a program crash or memory corruption . To remediate this issue, users ar...

CVE-2026-90624 Apache OpenOffice: PDF File Parsing Heap based Buffer-Overflow-Remote Code Execution Vulnerability

An unchecked memory access in the PDF import code of Apache OpenOffice versions through 4.1.16 on allows a crafted PDF to execute an out-of-bounds memory write. This could crash the program or cause memory corruption. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

CVE-2026-59264 Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer

The Windows installers of Apache OpenOffice 4.1.16 and earlier allow an already manipulated system to run external code with elevated access. Users are recommended to upgrade to version 4.1.17, which fixes this issue...

CVE-2026-59264

The Windows installers of Apache OpenOffice version 4.1.16 and earlier are vulnerable to an uncontrolled search path element (CWE-427). This flaw allows an already manipulated system to execute external code with elevated access . To remediate this vulnerability, users are recommended to upgrade ...

CVE-2026-99224

A flaw was found in the Linux kernel's key management subsystem. A local user can cause a Denial of Service DoS or potentially achieve arbitrary code execution by exploiting a race condition when retrieving key information while the corresponding kernel module is being unloaded. This issue occurs...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method. Resources https://vulners.com/cve/CVE-2016-2098 Usage To use this...

CVE-2022-0543

CVE-2022-0543 CVE-2022-0543RCE,Redis Lua沙盒绕过 命令执行 Usage python3 CVE-2022-0543.py...

CVE-2020-16947

CVE-2020-16947 This vulnerability occurs in Outlook 2019 16.0.13231.20262 installed on Windows 10 1909 x64 TLDR; I found this bug using winafl fuzzer. This bug occured when parsing html contents. if attacker successfully executes this exploit, it can lead to remote command execution. Details 0:00...

CVE-2025-32463-POC

CVE-2025-32463 - sudo Local Privilege Escalation PoC ⚠️ This repository contains a Proof of Concept PoC exploit for CVE-2025-32463 Intended only for educational purposes and use in authorized environments. 🧠 About the Vulnerability CVE-2025-32463 is a local privilege escalation vulnerability...

CVE-2026-120422

The Sogou Input Method for Windows application contains a vulnerability within the configuration retrieval mechanism of its SGTool.exe component. The software retrieves configuration data over unencrypted HTTP connections , which allows an attacker capable of manipulating network traffic to inter...

CVE-2022-22963

CVE-2022-22963 - Spring4shell To run the vulnerable SpringBoot application run this docker container exposing it to port 8080. Example: docker run -it -d -p 8080:8080 bobcheat/springboot-public Exploit Curl command: curl -i -s -k -X $'POST' -H $'Host: 192.168.1.2:8080' -H...

dlinject

dlinject.py Inject a shared library i.e. arbitrary code into a live linux process, without ptrace. Inspired by Cexigua and linux-inject, among other things. Usage .. . | /| | || || / | .. / | | | | |/ \ | |/ / \ \ \ | \ | |/|| /| |\ \ | /| // | / /| / / /|| / source:...

CVE-2026-95649

The software IRISPowerscan contains a vulnerability caused by the insufficient restriction of untrusted scripts . An authenticated user with access to script functionality can import or modify scripts that are subsequently executed by the application. This flaw can lead to arbitrary code executio...

Deep-Reaver

Deep Reaver Deep Reaver is a powerful, AI-enhanced vulnerability assessment and exploitation toolkit built in Python. Inspired by tools like Nmap and Nessus, Deep Reaver is designed for deep, modular scanning of web applications and services. Features AI-assisted analysis via aiassistant.py Modul...

ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution

ClamAV-Milter-Sendmail-0.91.2-Remote-Code-Execution Exploit for CVE-2007-4560 ClamAV Milter Sendmail 0.91.2 Remote Code Execution The exploit is for educational purposes only and should not be used for malicious purposes...

CVE-2026-114424

SEPPmail Secure Email Gateway versions before 15.1.1 are vulnerable to a critical remote code execution flaw. The vulnerability arises because the system can evaluate attacker-influenced replacement text as Perl code within sender or recipient replacement rules. An unauthenticated remote sender c...

cloudsplaining

Cloudsplaining Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized HTML report. Example report Documentation For full documentation, please visit the project on ReadTheDocs. Installation Cheatsheet Example report...