CVE-2026-106439

A flaw was found in hydra-core. Target execution policies used during object instantiation are stored in mutable module-level state. An attacker who supplies crafted configuration entries can manipulate this policy to remove restrictions on blocked targets. Successful exploitation allows the...

CVE-2026-106318

A flaw was found in chromium-browser. A remote attacker could achieve arbitrary code execution within the browser's sandbox environment by tricking a user into visiting a crafted HTML page. This issue is caused by a use-after-free memory flaw in the Media component, where previously released memo...

CVE-2026-106235

A flaw was found in chromium-browser. A use-after-free vulnerability—where memory is accessed after it has been released—exists in the WebAudio component. A remote attacker could exploit this issue by enticing a user to visit a crafted HTML page, potentially leading to arbitrary code execution...

CVE-2019-19781

CVE-2019-19781 Citrix Netscaler RCE...

ClearML-CVE-2024-24590

/ | | | / | | | \ / \ / | | | | | | \ / | | | | | | | | | | | | |/ / | '| |/| | | | /| | | | | | || | / | | | | | | | | | | | || | | |||,|| || ||| || / | - 2024-24590 x OxyDe ClearML Pickle Artifact Upload PoC This project demonstrates how to dynamically upload a pickle artifact to ClearML...

CVE-2021-41773-RCE

CVE-2021-41773-RCE...

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment Objective: Demonstrate the exploitation of the Log4Shell vulnerability CVE-2021-44228 within a simulated banking application environment. Scope: 1: Setup a vulnerable banking application using Apache Log4j. 2:Craft a payload to exploit...

CVE-2022-22965

Spring4Shell Vulnerability - CVE-2022-22965 📕 Introduction The spring4shell vulnerability was named this way due to 2 vulnerabilities found and widely exploited by attackers in early 2022. One of these vulnerabilities is in the framework component called "Spring Cloud Functions" less critical and...

CVE-2026-106509 Backstage: Improper validation of MkDocs theme configuration in TechDocs

Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper validation of mkdocs theme configuration in techdocs. When TechDocs is configured to build documentation locally or in a container, a user with write...

CVE-2026-106509

The Backstage open framework for developer portals is vulnerable due to improper validation of MkDocs theme configuration within the @backstage/plugin-techdocs-node package. A user with write access to a registered repository can inject malicious configuration values into mkdocs.yml , leading to ...

CVE-2026-106509 Backstage: Improper validation of MkDocs theme configuration in TechDocs

Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper validation of mkdocs theme configuration in techdocs. When TechDocs is configured to build documentation locally or in a container, a user with write...

CVE-2026-106509 Backstage: Improper validation of MkDocs theme configuration in TechDocs

Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs-node package is affected by improper validation of mkdocs theme configuration in techdocs. When TechDocs is configured to build documentation locally or in a container, a user with write...

CVE-2024-1247-PoC

CVE-2024-1247-PoC Post Saint -un -p -ru Disclaimer This script is for educational and rese...

CVE-2026-106505 Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend

Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by bypass of mkdocs configuration sanitizer in techdocs backend. Users with the ability to commit changes to a repository that uses TechDocs can...

CVE-2026-106505

The @backstage/plugin-techdocs-node package in the Backstage framework is vulnerable to a bypass of the MkDocs configuration sanitizer in the TechDocs backend. Affected versions are those prior to 1.14.6 and 1.15.4 . An attacker with permissions to commit changes to a repository using TechDocs ca...

CVE-2026-106505 Backstage: Bypass of MkDocs configuration sanitizer in TechDocs backend

Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package is affected by bypass of mkdocs configuration sanitizer in techdocs backend. Users with the ability to commit changes to a repository that uses TechDocs can...

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-46604 Disclaimer This repository contains proof-of-concept code for CVE-2023-466064 and is intended strictly for educational purposes. The authors and contributors do not endorse any illegal activity. The information presented here is for academic, security research, and...

CVE-2022-26134-Exploit-Detection

Confluence RCE CVE-2022-26134 Exploit Detection Pre-requisites 1. ClamAV Clone this repository or download the Yara rule on your confluence server We are using the Yara rule provided by volexity/threat-intel who first unveiled this vulnerability. Git Clone git clone...

CVE-2026-105267 Gitea tag delete route deletes releases without release permission

The Gitea web route for deleting tags POST /owner/repo/tags/delete requires only write access to the Code unit, but shares its handler with release deletion and did not check that the target was a plain tag. A collaborator with Code write access and without Releases write access could permanently...

CVE-2023-36164

CVE-2023-36164 An issue in MiniTool Partition Wizard ShadowMaker v.12.7 allows an attacker to execute arbitrary code via the MTAgentService component Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Idan Malihi Vendor Homepage:...