EUVD-2026-88015

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

CVE-2026-96280

The Flatpak OCI delta stream parser contains a vulnerability where it reads sizes as guint64 but passes them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems). This discrepancy results in undersized allocations while subsequent operations use the original 64-bit siz...

CVE-2026-96280

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

CVE-2022-42475-POC

CVE-2022-42475 Background This is the exploit for the blog post here: https://bishopfox.com/blog/exploit-cve-2022-42475 Redacted Version This version of the exploit will not work without you, the hacker, supplying the necessary memory addresses for ROP gadgets, etc. The work to determine these da...

PoC-CVE-2025-55182

PoC: CVE-2026-33017 A pre-authentication remote code execution vulnerability exists in React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code...

CVE-2017-15220-vxsearch-rce

CVE-2017-15220 – VX Search Enterprise Remote Buffer Overflow Remote buffer overflow vulnerability in VX Search Enterprise 10.1.12. Vulnerability Details CVE: CVE-2017-15220 Product: VX Search Enterprise Version: 10.1.12 Impact: Remote Code Execution Description VX Search Enterprise 10.1.12 is...

CVE-2022-30190

CVE-2022-30190 On Monday May 30, 2022, Microsoft issued CVE-2022-30190 regarding the Microsoft Support Diagnostic Tool MSDT in Windows vulnerability. A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who...

BadBlue

BadBlue Windows CVE-2024-21306 BadBlue implementation Using DuckyScript Unauthenticated Peering Leading to Code Execution Using HID Keyboard This is an implementation of the CVE discovered by marcnewlin And some code from BlueDucky Introduction BadBlue is a powerful tool for exploiting a...

CVE-2026-3891

CVE-2026-3891 Pix for WooCommerce If protocol is missing → scri...

Online-Admission-System-RCE-PoC

This repository does not have a README...

CVE-2024-52380

CVE-2024-52380 Picsmize = 1.0.0 - Unauthenticated Arbitrary File Upload Description The Picsmize plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to...

CVE-2022-30190

CVE-2022-30190 Follina Educational Malware Development, Exploitation, Analysis and Mitigation A fully documented proof-of-concept demonstrating the Follina vulnerability - from social engineering delivery through to exploitation, forensic analysis, and patch development. ⚠️ Educational Use Only...

CVE-2025-31337

CVE-2025-31337 Security Advisory CVE ID: CVE-2025-31337 Published: 2025-03-15 CVSS Score: 9.8 Critical CWE: CWE-120 Buffer Copy without Checking Size of Input Description A critical buffer overflow vulnerability was discovered in the AIDR ChatBot Framework version 4.2.0 and earlier. The...

CVE-2025-32463

CVE-2025-32463 Es una vulnerabilidad de escalada de privilegios local que afecta a versiones vulnerables de sudo. La falla abusa de la función sudo -R chroot junto con el mecanismo de Linux Name Service Switch NSS para forzar a sudo a cargar una biblioteca compartida controlada por el atacante co...

CVE-2025-59287---WSUS-SCCM-RCE

CVE-2025-59287 - WSUS / SCCM RCE Based on the original exploit at: https://gist.github.com/hawktrace/76b3ea4275a5e2191e6582bdc5a0dc8b You can now specify the ysoserial.exe and execute whatever you want: https://hawktrace.com/blog/cve-2025-59287/ https://hawktrace.com/blog/cve-2025-59287-unauth/...

CVE-2025-54123

CVE-2025-54123 Overview Authenticated Remote Code Execution in HoverFly's middleware API endpoint due to insufficient input validation and unsafe command execution. Attack Flow 1. Authentication Attacker authenticates to HoverFly using valid credentials or session token Obtains Bearer token via...

CVE-2022-25064

CVE-2022-25064 TP-LINK TL-WR840N RCE via the function oalwan6setIpAddr POC POST /cgi?2&2&2 HTTP/1.1 Host: 192.168.0.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:95.0 Gecko/20100101 Firefox/95.0 Accept: / Accept-Language: es-ES,es;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip,...

CVE-2024-22274

CVE-2024-22274: Authenticated Remote Code Execution in VMware vCenter Server The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the...

cve-2019-11447

CVE-2019-11447 CutePHP Cute News 2.1.2 RCE PoC Target : 2.1.2 This PoC script is based on a simple implementation of the original exploit by BobbySox. The original exploit is an MSF module by Akuss. This script needs the target ip address or domain along with credentials and it will automatically...

cloudpanel-2.4.2-CVE-2024-44765-recovery

CVE-2024-44765 is an Improper Authorization Access Control Misconfiguration vulnerability in MGT-COMMERCE GmbH CloudPanel versions 2.0.0 to 2.4.2 1. Follow instructions in every folder this should be done locally 2. Reset Passwords and Access for root $ sudo passwd root while for users $ getent...