CVE-2026-122329

A flaw was found in SDLmixer. The library's Audio Interchange File Format AIFF decoder miscalculates memory offsets when decompressing audio samples, resulting in a stack-based buffer overflow. An attacker could exploit this vulnerability by supplying a specially crafted audio file, potentially...

CVE-2026-122299

A flaw was found in Dulwich. This flaw allows arbitrary code execution on systems that process untrusted repositories. When parsing Git commit objects, Dulwich resolves duplicate tree headers to the last occurrence instead of the first, conflicting with standard Git behavior. A remote attacker ca...

CVE-2026-76826

A flaw was found in tsParticles. The automated release workflow interpolates release note text directly into a shell command without proper sanitization. A remote attacker or contributor can exploit this vulnerability by submitting content containing shell control characters, leading to arbitrary...

CVE-2026-76077

A flaw was found in asn1scc. The XML Encoding Rules XER tokenizer does not properly enforce length bounds when copying tag data and fails to check buffer limits during input processing. A remote attacker could exploit this vulnerability by providing a crafted XER message, leading to stack memory...

Project-Exploiting-a-Vulnerability-in-Fuel-CMS-CVE-2018-16763-

The goal of this project was to conduct a security audit of a blog recently launched by Ackme Support Incorporated, identifying any critical vulnerabilities before the site goes public. The task involved finding a way to remotely execute code and gain access to the target system. Environment &...

CVE-2026-102739

A flaw was found in ESPectre. The analysis tools insecurely load dataset files with Python object deserialization enabled. An attacker can supply a specially crafted dataset file containing malicious serialized data, leading to arbitrary code execution when a user or developer processes the file...

CVE-2026-108387

A flaw was found in radare2. An attacker can exploit this vulnerability by convincing a user to open or analyze a specially crafted binary file. When parsed, malicious data causes radare2 to invoke an internal debugging handler that executes system commands with attacker-supplied arguments. This...

CVE-2026-123019

A flaw was found in DB-GPT's Hugging Face adapter. A remote attacker could exploit this vulnerability by manipulating the trustremotecode setting when loading model repositories. This causes the application to include and run untrusted external code, leading to arbitrary code execution on the hos...

CVE-2026-123020

A flaw was found in DB-GPT. The application fails to properly sanitize user input before passing it to the Jinja2 template engine in the skill prompt component. A remote attacker could exploit this vulnerability by submitting crafted template expressions, leading to server-side template injection...

CVE-2026-122328

A flaw was found in SDLmixer. A stack-based buffer overflow vulnerability exists in the WAV audio decoder when processing audio streams compressed with A-law or mu-law formats. By enticing a user or application to process a specially crafted WAV file, an attacker could overwrite stack memory,...

CVE-2026-121958

A flaw was found in FreeRDP. This vulnerability allows a remote attacker to cause a Denial of Service DoS or potentially execute arbitrary code on the client system. An attacker operating a malicious Remote Desktop Protocol RDP server, or acting in a man-in-the-middle position, can exploit this...

CVE-2026-82912

A flaw was found in Apache OFBiz. An expression language injection vulnerability in the email service allows a remote authenticated attacker with basic view permissions to execute arbitrary operating system commands. By submitting crafted script expressions through the invoice email form, the...

CVE-2026-84183

A flaw was found in Apache OFBiz. An improper authorization check allows a remote authenticated user with limited view permissions to modify restricted content and execute arbitrary commands. By exploiting flawed permission validation to evaluate server logs containing injected input as applicati...

CVE-2020-7115

CVE-2020-7115 Create your malicious engine in seconds buildengine.sh Simple script to generate a malicious engine ready to be used in openssl argument injection scenarios. How to use? It's very simple, just modify the engine.c file with the command of your choice: include attributeconstructor...

threat-intel-cve-2024-3094

Threat Intelligence Report: CVE-2024-3094 – XZ Utils Backdoor This repository contains a threat intelligence report analyzing CVE-2024-3094 , a high-profile backdoor vulnerability discovered in the xz-utils compression tool in 2024. CVE-2024-3094 is a severe supply chain compromise where a...

Malicious code in oktz-baileys (npm)

oktz-baileys is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own authenticated WhatsApp account to an author-chosen WhatsApp Channel. Part of the campaign OX Security documented as "PhantomSub" 2026-09-28:...

Malicious code in kurobails (npm)

kurobails is a fork of the Baileys WhatsApp Web library that silently subscribes the installer's own authenticated WhatsApp account to an author-chosen WhatsApp Channel. Part of the campaign OX Security documented as "PhantomSub" 2026-09-28:...

Malicious code in @nuri.yavuz.tr.2/my-unique-pinger (npm)

Source: ossf-package-analysis d9a584d7d9890fd25a656e38f323071b7ac3b419a2050fe50452c598f78a4876 The OpenSSF Package Analysis project identified '@nuri.yavuz.tr.2/my-unique-pinger' @ 1.0.2 npm as malicious. It is considered malicious because: - The package executes one or more commands associated...

IngressNightmare-RCE-POC

⚠️ Critical RCE in Ingress-NGINX via Configuration Injection CVE-2025-1974 and more This repository contains a proof-of-concept PoC exploit for CVE-2025-1974 , a Critical CVSS 9.8 vulnerability in the Ingress-NGINX controller for Kubernetes. This flaw allows unauthenticated remote code execution...

SC3010-Computer-Security

SC3010-Computer-Security — CVE-2017-5638 Attack Recreation This repository is part of the SC3010 Computer Security course project. It recreates CVE-2017-5638 , a critical Remote Code Execution vulnerability in Apache Struts 2 versions 2.3.5–2.3.31 and 2.5–2.5.10, famously exploited in the 2017...