CVE-2026-92262

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mysql50 bypass prefix is affected because it allows the mysql50 prefix to bypass normal table-name filesystem encoding. An attacker can trigger the issue wit...

CVE-2026-85748

MariaDB server is a community developed fork of MySQL server. From 12.3.1 until 12.3.3 and 13.0.2, SYSREFCURSOR handling is affected because cursor-array reallocation can leave stale references in routine contexts. A low-privileged attacker can open a large number of SYSREFCURSORs and then fetch...

CVE-2026-85746

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, STAsText can write beyond an allocated output buffer when converting deeply nested GeometryCollections because recursive WKT serialization does not account for...

CVE-2026-102693

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0stasetcurrentssid function uses strcpy to copy an SSID without checking the destination size. When...

spark-exploit

Arbitary Code Execution in Unsecured Apache Spark Cluster How to Exploit Follow the below steps: $ git clone https://github.com/akhld/spark-exploit.git $ cd spark-exploit Remote Code Execution Open exploit.scala, Replace the following code with whatever you want to get executed! val exploit =...

VertXploit

VertXploit Exploiting HID VertX and EDGE access control systems Summary VertXploit is a tool that can be used to exploit HID VertX and EDGE access control systems. A vulnerability exists within the discoveryd service, which fails to sanitize user data before executing system calls. This allows fo...

SCAT

SCAT HP SiteScope Credential Acquisition Tool What is this? A tool that abuses a remote code execution vulnerability in default HP SiteScope v11.32 et al installations to steal credentials stored in SiteScope. What remote code execution vulnerability? HP SiteScope by default enables Java Manageme...

CVE-2026-102693 RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0stasetcurrentssid function uses strcpy to copy an SSID without checking the destination size. When...

CVE-2026-102693

The RIOT open-source microcontroller operating system is vulnerable to a remote stack buffer overflow in the ATWINC15x0 driver prior to version 2026.04 . The root cause is the use of strcpy within the _atwinc15x0_sta_set_current_ssid function, which copies an SSID without verifying the destinatio...

EUVD-2026-102946

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0stasetcurrentssid function uses strcpy to copy an SSID without checking the destination size. When...

cgiemail-exploit

Cgiemail - Source Code Disclosure/Local File Inclusion Exploit cgiecho a script included with cgiemail will return any file under a websites document root if the file contains square brackets and the text within the brackets is guessable. cgiemail is currently shipped with cPanel, enabled by...

amasty-chekout-POC-rce

CVE-2026-53787 - Amasty Order Attributes Unauthenticated File Upload Description CVE-2026-53787 is a critical unauthenticated arbitrary file upload vulnerability in the Amasty Order Attributes extension for Magento 2 versions prior to 4.0.0 . The vulnerability allows attackers to upload files of...

CVE-2026-5843

CVE-2026-5843 PoC Minimal OCI registry that serves a malicious model to exploit the modelfile importlib execution path in mlx-lm. When Docker Model Runner loads the model for inference, model.py executes on the host as the logged-in user. Requires: Docker Desktop ≤ 4.70.x Apple Silicon with Model...

CVE-2022-47966

CVE-2022-47966 ManageEngine RCE 2022 This repo is part of the hgrab-framework Installation Install the app on the server user@domain: git clone https://github.com/sh4den/CVE-2022-47966.git user@domain: cd ./CVE-2022-47966/ user@domain: python3 main.py The list file must contain the targets server...

CVE-2025-59528

CVE-2025-59528: Flowise CustomMCP Remote Code Execution PoC A Go proof of concept for CVE-2025-59528 targeting Flowise versions Example go run main.go http://target.com h3D9jD7Xzi0V2KSrld9ff4P3rm6cuNXg1uA-wFsUYc "touch /tmp/pwned"...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

CVE-2024-29943-but-with-wasm

CVE-2024-29943, but with wasm An end-to-end exploit chain for CVE-2024-29943 that achieves arbitrary native code execution by smuggling shellcode into SpiderMonkey's WebAssembly JIT code page as f64.const immediates — no ROP, no VirtualProtect, no external toolchain. Verified working against the...

CVE-2026-39987-Poc

CVE-2026-39987-Poc Proof of Concept PoC WebSocket client for CVE-2026-39987 Marimo Pre-Auth RCE, intended for authorized security testing. ⚠️ Disclaimer This script/tool is provided for educational, research, and authorized testing purposes only. It is designed to be used on systems where you have...

POC-CVE-2025-55182

CVE-2025-55182 - React RSC RCE PoC for the deserialization vulnerability in the Flight protocol of React Server Components. What is it? Next.js 14+ and React 19 use a proprietary protocol "Flight" to communicate between client and server. The problem: the server loads any module without...

CVE-2022-31814

Download CVE-2022-31814 This script exploits a vulnerability in pfSense to upload a shell, execute a command, and then delete the shell. Requirements Python 3.x requests library Installation 1. Clone the repository or download the script. 2. Install the required Python libraries: pip install...