CVE-2026-108428

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108431

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108429

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108430

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108432

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108426

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108427

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

cq

cq Code Query, a universal code security scanning tool. CQ scans code for security vulnerabilities and other items of interest to security-focussed code reviewers. It outputs text files containing references to issues found, into an output directory. These output files can then be reviewed,...

DroppedConnection

DroppedConnection Emulates a Cisco ASA Anyconnect VPN service, accepting any credentials and logging them before serving VBS to the client that gets executed in the context of the user. Blog post:...

CVE-2026-25769

🚨 CVE-2026-25769 - Wazuh Insecure Deserialization RCE Critical Worker ➜ Master Remote Code Execution in Wazuh Cluster Mode Unsafe deserialization in Wazuh cluster communications allows a compromised worker node to achieve root RCE on the master node. 📌 Overview CVE ID: CVE-2026-25769 Product: Waz...

SharePoint-ToolShell-CVE-2025-53770-Incident-Analysis

SharePoint ToolShell CVE-2025-53770 Incident Analysis Overview This project documents the investigation of a real-world exploitation attempt targeting a SharePoint server using the ToolShell vulnerability CVE-2025-53770. The attack demonstrates a full exploitation chain including remote code...

CVE-2021-24499

CVE-2021-24499 | Workreap - Freelance Marketplace and Directory WordPress Theme 2.2.2 - Arbitrary File Upload WordPress Theme Workreap 2.2.2 - Unauthenticated File Upload Leading to Remote Code Execution A powerful and accurate mass exploitation tool for CVE-2021-24499 vulnerability in WordPress...

ICPin

ICPin An Integrity-Check Monitoring Pintool What A pintool that records the reads and writes to the executable in memory. It also tracks dynamically executed code and handles some antidebug checks it is immune to most antidebug by pintools design and outputs backtraces of watched behavior. How...

ncccodenavi

ncccodenavi NCC Code Navi the Text Viewer and Searcher for Code Reviewers Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Ollie Whitehouse, ollie dot whitehouse at nccgroup dot com http://www.github.com/nccgroup/ncccodenavi Released under AGPL see LICENSE for more...

pairing

Optimizations for Pairing-Based Cryptography This repository contains the working Rust code that corresponds to an ongoing series of blog posts covering optimizations in pairing-based cryptography using BLS12-381 as the reference curve. Please note: This code is for educational purposes, has not...

EUVD-2026-102464

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-108452

A path traversal vulnerability (CWE-22) exists in Microsoft Office SharePoint , where improper limitation of a pathname to a restricted directory allows an authorized attacker to execute code over a network . The vulnerability is associated with the security update for SharePoint Server Subscript...

EUVD-2026-102463

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-102462

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108450

A Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). The impact is categorized as High severity, with the po...