burp-exporter

Exporter Extension for Burp Suite Community and Pro Follow us to know more about tips and others extensions Description Exporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions. It also adds a tab called Exporter where you can...

Exploit for CVE-2026-16723

FastJson 1.2.83 GenProbe2 Purpose: Used to reproduce the...

badepoll-selinux-disabler

badepoll-selinux-disabler Standalone extraction of the SELinux-disabling stage from the CVE-2026-43074 eventpoll UAF exploit. It races the eventpoll loop-depth check epgetupwardsdepthproc to write a zero into selinuxstate.enforcing, switching the device to Permissive via a single-byte kernel writ...

CVE-2020-5398

CVE-2020-5398 - RFDReflected File Download Attack for Spring MVC In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download RFD attack when it sets a “Content-Disposition” header...

CVE-2026-112310

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112310

The docling-core library, through version 2.102.0 , is vulnerable to a local file disclosure (CWE-73) vulnerability. This issue occurs because the software allows attackers to supply plain filesystem paths in ImageRef URIs , effectively bypassing the allow_image_file_uri gate. By submitting craft...

CVE-2026-112310 docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112310 docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

EUVD-2026-104402

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112310 docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-112309

@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods. Attackers can submit a form field named hasOwnProperty.call through @rvf/core form...

EUVD-2026-104401

@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods. Attackers can submit a form field named hasOwnProperty.call through @rvf/core form...

CVE-2026-112309 @rvf/set-get before 7.0.4 Prototype Pollution via setPath Inherited Methods

@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods. Attackers can submit a form field named hasOwnProperty.call through @rvf/core form...

CVE-2026-112309

The @rvf/set-get library (versions before 7.0.4 ) is vulnerable to a prototype pollution vulnerability within the setPath function. This flaw allows unauthenticated attackers to overwrite properties of shared built-in functions by leveraging inherited Object.prototype methods. Specifically, an at...

CVE-2026-112309 @rvf/set-get before 7.0.4 Prototype Pollution via setPath Inherited Methods

@rvf/set-get before 7.0.4 contains a prototype pollution vulnerability in setPath that allows unauthenticated attackers to overwrite properties of shared built-in functions via inherited Object.prototype methods. Attackers can submit a form field named hasOwnProperty.call through @rvf/core form...

CVE-2026-112303 GDevelop through 5.6.284 Cookie Leak via LocalFileDownloader Resource URLs

GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gdresource cookie by supplying attacker-controlled resource URLs in project files. Attackers can get victims to open a crafted project, causing downloadLocalFile to send the cookie to...

EUVD-2026-104395

GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gdresource cookie by supplying attacker-controlled resource URLs in project files. Attackers can get victims to open a crafted project, causing downloadLocalFile to send the cookie to...

CVE-2026-112303

The GDevelop desktop application (versions through 5.6.284 ) is vulnerable to a credential leak via the LocalFileDownloader resource URLs. The root cause is that the downloadLocalFile() function may send the gd_resource cookie to an external server when a user opens a crafted project containing a...

CVE-2026-112304

The docTR library (versions through 1.1.0 ) is vulnerable to Remote Code Execution (RCE) via unsafe deserialization in the load_pretrained_params() function. The root cause is the use of torch.load without setting weights_only=True, which allows attackers to execute arbitrary Python code by provi...

CVE-2026-112304

docTR through 1.1.0 contains an unsafe deserialization vulnerability in loadpretrainedparams that loads checkpoints with torch.load without weightsonly=True. Attackers who control a local or URL-supplied checkpoint can embed a malicious pickle payload to execute Python code with the loading...