5486 matches found
python-codext
CodExt Encode/decode anything. CodExt is a library Python 3.10 or later that extends the native codecs library namely for adding new custom encodings and character mappings and provides 150+ new codecs , hence its name combining CODecs EXTension. It also features a guess mode for decoding multipl...
ESAPI-SQLinjection-CVE-2025-5878-Exploit
Affected: ESAPI.encoder.encodeForSQL method and OracleCodec class Affected versions: 2.2.0.0-2.6.2.0 Usage: similar to sqlmap usage: esapi-sqlinjection.py -h -u URL -c COOKIE --dbs --tables --columns -D DB -T TABLE -C COLUMN --dump esapi-sqlinjection.py: error: the following arguments are require...
plex2shell
plex2shell Unauth RCE chain for Plex Media Server 1.43.3.10828. Fixed in 1.43.3.10861. Update ASAP. CVSS 3.1: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Write-up: https://zmain.info/blog/plex2shell Disclaimer This tool is published for authorized security testing, academic research, and defensive...
plex-codec-cache-implant
Unsigned .so planted in Plex Media Server's codec cache executes a Monero miner on every transcode Incident date: 2026-10-17 → 2026-10-18 UTC+02:00 Vulnerability: CVE-2026-96656 CVSS 4.0: 8.6, CISA-assigned — fixed in Plex Media Server 1.43.3.10861 Affected: Plex Media Server 1.43.2.10687 Linux,...
CVE-2026-85246
CVE-2026-85246 — camel-mina: consumer information disclosure exception written over the socket Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the Mina consumer wroteexchange.getException straight back over the socket to the remote peer when processing of an exchange...
CVE-2026-0006-openapv-poc
CVE-2026-0006: Heap Buffer Overflow in libopenapv Android APV Codec Patch Analysis & Reproduction by Mobile Hacking Lab CVSS 9.8 Critical | Actively exploited in the wild | Patched March 2026 Note: We did not discover this vulnerability. All credit for finding and responsibly reporting...
CVE-2019-2107
CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected i...
netty-http-check
netty-http-check Offline checker for 23io.netty:netty-codec-http advisories 2025–2026 — the 14 CVEs in the GitHub Advisory Database, plus 9 advisories that Netty published on 2026-09-10 only in its own repository, which Dependabot cannot see. It tells you which ones you are actually exposed to, a...
netty-http2-check
netty-http2-check Offline checker for the 7io.netty:netty-codec-http2 CVEs. Tells you which ones you are actually exposed to — and the single version that fixes all of them: 4.1.136.Final / 4.2.16.Final, a number that appears on none of the seven advisories. CVE-2025-55163 · CVE-2026-33871 ·...
gdcm-security-poc
GDCM findings 1-6: reproduction package Six parser/codec defects in GDCM, reproduced on v3.2.6 as sanitizer failures or bounded propagation checks. Each automated trigger has a near-valid control that does not produce the vulnerable signal. Finding 1 also includes an instrumented control-flow...
CLSA-2026-1794483091 TuxCare security update for io.netty:netty-codec-haproxy (2 CVEs)
TuxCare rebuilt io.netty:netty-codec-haproxy to address 2 CVEs. Fixed in 4.1.87.Final-tuxcare.6...
CLSA-2026-1794480789 TuxCare security update for io.netty:netty-codec-haproxy (1 CVE)
TuxCare rebuilt io.netty:netty-codec-haproxy to address 1 CVE. Fixed in 4.1.29.Final-tuxcare.6...
CLSA-2026-1794478992 TuxCare security update for io.netty:netty-codec-http (1 CVE)
TuxCare rebuilt io.netty:netty-codec-http to address 1 CVE. Fixed in 4.1.64.Final-tuxcare.3...
CLSA-2026-1794474483 TuxCare security update for io.netty:netty-codec-haproxy (1 CVE)
TuxCare rebuilt io.netty:netty-codec-haproxy to address 1 CVE. Fixed in 4.1.23.Final-tuxcare.4...
Envoy-CPU-Exhaustion-Vulnerability-PoC
Envoy CPU Exhaustion Vulnerability PoC This repository contains a proof-of-concept PoC Python script to demonstrate the CPU exhaustion vulnerability in Envoy caused by a flood of CONTINUATION frames. Author: blackmagic 2024 Description Envoy is a cloud-native, open-source edge and service proxy...
openjpeg-2.3.0_CVE-2020-27824
OPENJPEG Library and Applications What is OpenJPEG ? OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group JPEG. Since April 2015, it is...
CLSA-2026-1794471200 TuxCare security update for io.netty:netty-codec-http (1 CVE)
TuxCare rebuilt io.netty:netty-codec-http to address 1 CVE. Fixed in 4.1.74.Final-tuxcare.3...
CLSA-2026-1794469946 TuxCare security update for io.netty:netty-codec-haproxy (1 CVE)
TuxCare rebuilt io.netty:netty-codec-haproxy to address 1 CVE. Fixed in 4.1.21.Final-tuxcare.6...