php2shell-pmb-poc

php2shell → PMB: unauthenticated RCE chain Authorized penet...

CVE-2026-119777 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...

EUVD-2026-114266

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...

CVE-2026-119777

A flaw exists in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow occurs while parsing the profile, tier, and level fields, which can lead to a stack-based buffer overflow . This vulnerability could allow an attacker to caus...

CVE-2026-119777 Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad-free: stack buffer overflow in h.266/vvc parser

A flaw was found in GStreamer's gst-plugins-bad H.266/VVC parser. When processing a malformed H.266 media file or stream, an integer overflow while parsing profile, tier, and level fields can lead to a stack-based buffer overflow. An attacker could cause an application to crash and may be able to...

CVE-2026-119719

A flaw was found in Blender. This vulnerability may allow arbitrary code execution or cause an application crash resulting in a Denial of Service DoS. By convincing a user to preview a specially crafted blend file with invalid image dimensions, an attacker can trigger an integer overflow in the...

CVE-2026-119718

A flaw was found in Blender. An integer overflow issue in the point cache allocation function ptcachedataalloc leads to a heap-based buffer overflow when reading point cache data. An attacker could exploit this vulnerability by convincing a user to load a specially crafted point cache file...

CVE-2026-61627

A flaw was found in libass. An attacker could exploit this vulnerability by enticing a user to process a specially crafted subtitle file, triggering an out-of-bounds write during line measurement. Successful exploitation may result in arbitrary code execution or cause an application crash leading...

CVE-2026-19773

A flaw was found in libwebsockets. This vulnerability allows an unauthenticated remote attacker to achieve arbitrary code execution by sending specially crafted HTTP/2 network traffic. The issue occurs due to improper input validation during the parsing of path headers compressed with HPACK a...

CVE-2026-104064

A flaw was found in Scribus. An integer overflow in the Tagged Image File Format TIFF loader allows an attacker to trigger a heap buffer overflow by convincing a user to import a maliciously crafted TIFF image with oversized tile dimensions. Successful exploitation could allow arbitrary code...

CVE-2026-104065

A flaw was found in Scribus. An out-of-bounds write vulnerability in the Micrografx Draw DRW plugin allows an attacker to achieve arbitrary code execution or a Denial of Service DoS by tricking a user into importing a specially crafted file. Due to improper validation of image offsets during...

CVE-2026-104061

A flaw was found in Scribus. This vulnerability allows arbitrary code execution or a Denial of Service DoS due to an out-of-bounds memory write in the Photoshop Document PSD image loader. An attacker could exploit this flaw by convincing a user to import or open a specially crafted PSD file,...

Project-Exploiting-CVE-2024-27198-RCE-Vulnerability

Exploiting CVE-2024-27198-RCE Vulnerability In this project, I exploited the CVE-2024-27198-RCE vulnerability to perform a remote code execution RCE attack on a vulnerable TeamCity server. The vulnerability allows uploading and activating a malicious plugin that provides access to the remote syst...

CVE-2023-36165

CVE-2023-36165 An issue in MiniTool Partition Wizard ShadowMaker v.12.7 allows an attacker to execute arbitrary code and gain privileges via the SchedulerService.exe component. Exploit Title: MiniTool Partition Wizard ShadowMaker v.12.7 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Ida...

fgt-cve-2023-27997-exploit

fgt-cve-2023-27997-exploit FortiGate SSL‑VPN CVE‑2023‑27997 Exploit PoC Script with ROP Chain Table of Contents Description Affected Versions Installation Usage Example Output Technical Details Warnings References Description fgt-cve-2023-27997-exploit.py is a Proof‑of‑Concept PoC exploit script...

log4j2-test

Log4j2 2.14.1 LDAP Remote Code Execution Vulnerability CVE-2021-44228 Verification 🎈 Tested on Spring Boot 2.x environment Vulnerability advisory https://nvd.nist.gov/vuln/detail/CVE-2021-44228 target-server pom.xml : Downgraded Log4j2 version to a vulnerable version 17 2.14.1 LoggingController :...

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend

ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend TL;DR Yo, in this LetsDefend lab I dove into a SharePoint zero-day called ToolShell CVE-2025-53770. Basically, I mimicked a real-world attack where a malicious POST request bypassed auth, ran PowerShell to steal MachineKeySection keys,...

Important: Red Hat Security Advisory: bind9.18 security update

An update for bind9.18 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay

A flaw was found in BIND. This vulnerability may allow a remote attacker to achieve arbitrary code execution on the target server. An attacker who captures a valid User Datagram Protocol UDP message signed with Generic Security Service Transaction Signature GSS-TSIG can replay it while the...

MAL-003

MAL-003: Groovy Security Bypass and Stored XSS in Apache OfBiz A Groovy RCE and XSS have been identified in Apache OfBiz = 18.12.05. Why no CVE? Apache OfBiz does not create CVEs for "post-auth attacks done using demo credentials, notably using the admin user" as mentioned on their security page...