58022 matches found
Insecure Default Initialization of Resource
Overview @storybook/core is a Storybook framework-agnostic API Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the Vitest plugin in storybookTest, where allowWrite and allowExec permissions are not applied to the resolved project config when usi...
Insecure Default Initialization of Resource
Overview storybook is a frontend workshop for building UI components and pages in isolation. Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the Vitest plugin in storybookTest, where allowWrite and allowExec permissions are not applied to the...
Insecure Default Initialization of Resource
Overview @storybook/addon-mcp is a Help agents automatically write and test stories for your UI components Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the Vitest plugin in storybookTest, where allowWrite and allowExec permissions are not...
Insecure Default Initialization of Resource
Overview @storybook/addon-vitest is a Storybook Vitest addon: Blazing fast component testing using stories Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the Vitest plugin in storybookTest, where allowWrite and allowExec permissions are not...
Exploit for CVE-2026-111497
CVE-2026-111497: Node.js Brotli Decoder Out-of-Bounds Write...
Pillow multi-frame loaders can reuse stale native image storage after mode transitions
Summary Pillow multi-frame image loaders can retain native ImagingCore storage allocated for one frame while changing the Python-side image mode and decoder tiles for a later frame. If frame 0 allocates storage for a narrow mode such as L, and a later frame of the same dimensions switches to a...
GHSA-V9PV-5GC8-W2M6 Pillow multi-frame loaders can reuse stale native image storage after mode transitions
Summary Pillow multi-frame image loaders can retain native ImagingCore storage allocated for one frame while changing the Python-side image mode and decoder tiles for a later frame. If frame 0 allocates storage for a narrow mode such as L, and a later frame of the same dimensions switches to a...
EUVD-2026-107573
Pillow multi-frame loaders can reuse stale native image storage after mode transitions...
OESA-2026-4520 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: When a printer is added or modified with a model PPD, the cupsd...
OESA-2026-4519 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: When a printer is added or modified with a model PPD, the cupsd...
OESA-2026-4518 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: When a printer is added or modified with a model PPD, the cupsd...
OESA-2026-4517 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: When a printer is added or modified with a model PPD, the cupsd...
cve-2022-33891
CVE-2022-33891 Apache Spark Shell Command Injection Vulnerability A Python POC for exploiting the Apache Spark Shell Command Injection vulnerability. I saw some other POCs out there but they looked mega sus. This one is clean and simple. I did not discover this exploit/vulnerability. I just wante...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell PoC — CVE-2026-109619 This is a minimal proof of co...
Vulnerabilities in Snort 3 of Cisco
Cisco has addressed several vulnerabilities in Snort 3, the open-source intrusion detection and prevention system used in various Cisco products. These vulnerabilities reside in various components of the Snort 3 Detection Engine, including the SMTP MIME Decoder, NetFlow Detection Engine, GRE...
PHP2Shell
PHP2Shell CVE-2026-109618 PHP 8.5.4 may allow for a buffer...
Exploit for Authentication Bypass by Spoofing in Ivanti Connect_Secure
Bluefire Redteam — Ivanti Connect Secure check Checker only...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell PoC lab CVE-2026-109618 / CVE-2026-109619 Minimal...
CVE-2021-27928
CVE-2021-27928 In this repository, you will find a proof of concept of the exploitation of the CVE-2021-27928 flaw through a docker container. Exploit Title: MariaDB 10.2 /MySQL - 'wsrepprovider' OS Command Execution Date: 03/18/2021 Exploit Author: Central InfoSec Version: MariaDB 10.2 before...