861576 matches found
CVE-2026-29000
CVE-2026-29000: pac4j-jwt JwtAuthenticator authentication bypass Full buildout: writeup, Java in-process PoC, Python token-forge CLI and library, tests. Summary CVE: CVE-2026-29000 CVSS 10, CWE-347 Affected: pac4j-jwt 4.5.9 / 5.7.9 / 6.3.3 when using JWE + signature config Issue: JWE-wrapped...
CVE-2026-31431
CVE-2026-31431 - Copy Fail Copy Fail is a logic bug in the Linux kernel's crypto subsystem CVE-2026-31431. A 2017 optimization in algifaead.c accidentally placed page cache pages into a writable scatterlist. The authencesn AEAD algorithm writes 4 scratch bytes past the output boundary during...
CVE-2026-41651
CVE-2026-41651 β PackageKit TOCTOU Local Privilege Escalation Classification: Purple Team Assessment Artifact Authorized use only. This document and the accompanying test script are intended solely for internal security validation on systems where written authorization has been obtained. Proof of...
CVE-2019-12725-modified-exp
CVE-2019-12725-modified-exp Modified to fix errors and execute commands with higher priviliege, also removed the sleep13 in the original script to save time. references: https://www.modb.pro/db/120391 https://www.exploit-db.com/exploits/49862...
CVE-2026-53921-PoC-Exploit
CVE-2026-53921 β odhcpd Stack Overflow For educational and authorized testing only. Unauthorized use is illegal. Vulnerability Overview CVE-2026-53921 is a critical stack buffer overflow in OpenWrtβs odhcpd daemon β the default DHCPv6/DHCPv4/RA server. How it works The vulnerability exists in...
CVE-2026-118276 a2ui-project a2ui Parser expression_parser.ts formatString resource consumption
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the file renderers/webcore/src/v09/basiccatalog/expressions/expressionparser.ts of the component Parser. This manipulation causes resource consumption. The attack may be...
EUVD-2026-111578
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the file renderers/webcore/src/v09/basiccatalog/expressions/expressionparser.ts of the component Parser. This manipulation causes resource consumption. The attack may be...
CVE-2026-118276
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the file renderers/webcore/src/v09/basiccatalog/expressions/expressionparser.ts of the component Parser. This manipulation causes resource consumption. The attack may be...
CVE-2026-118276 a2ui-project a2ui Parser expression_parser.ts formatString resource consumption
A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This vulnerability affects the function formatString of the file renderers/webcore/src/v09/basiccatalog/expressions/expressionparser.ts of the component Parser. This manipulation causes resource consumption. The attack may be...
CVE-2026-118276
The a2ui-project a2ui component, up to version 0.10.6 , is vulnerable to a resource consumption issue. The flaw exists in the formatString function within the file renderers/web_core/src/v0_9/basic_catalog/expressions/expression_parser.ts of the Parser component. An attacker may initiate this att...
multiparty-CVE-2026-8161
CVE-2026-8161 Proof of concept of CVE-2026-8161 Multiparty Description [email protected] and earlier are vulnerable to denial of service through an uncaught exception. The parser stores uploaded fields and files in plain JavaScript objects and does not safely distinguish parser owned keys fr...
CVE-2025-14857-MongoBleed
CVE-2025-14847 MongoBleed - Functional PoC MongoDB Memory Leak Exploitation - Simulated R6 Attack Complete Proof of Concept for CVE-2025-14847 MongoBleed Tested: β MongoDB 7.0.5 | 14,300+ Successful Exploits | 4 Leaked UUIDs π― About the Project This repository contains a fully functional Proof of...
RATel
RATel Please do not upload to virustotal ! To prevent RATel from being detected by antivirus, please do not upload the payload to TOTAL VIRUS. Each month I will test myself if the payload gets detected by antivirus. So youβll have a photo every month to prove RAtel discretion. Description RAT-el ...
CVE-2025-55183-poc
CVE-2025-55183-poc β Next.js React Server Components Server Function Source Code Disclosure This repository contains detection tooling for a source code disclosure vulnerability in Next.js React Server Components RSC / Server Actions , tracked as CVE-2025-55183. In vulnerable applications, a...
pfsense-carp-vhid
abraxaslabs.tech Β· github.com/abraxas Β· @abraxasnull Β· [email protected] Β· pfsense-carp-vhid pfsense-carp-vhid Class: RCE Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org Virtual IP edit stores CARP VHID from POST with no 1-255 check. FormSelect options are HTML only. CARP...
POC-CVE-2025-1094
POC CVE-2025-1094: PostgreSQL psql SQL Injection Proof of Concept for critical SQL Injection vulnerability in PostgreSQL client libpq and psql tool π Table of Contents 1. Vulnerability Overview 2. Project Directory Structure 3. Attack Payload Analysis 4. Usage Guide 5. Mitigation & Prevention 1...
CVE-2026-21858
CVE-2026-21858 + CVE-2025-68613 - n8n Full Chain Unauthenticated Arbitrary File Read β Admin Token Forge β Sandbox Bypass β RCE | ---|--- CVE| CVE-2026-21858 AFR + CVE-2025-68613 RCE CVSS| 10.0 + 9.9 Critical Affected| = 0.211.0 RCE Fixed| 1.121.0 AFR / 1.120.4+ RCE Disclosed| 2026-01-07 11:09 UT...
-exploit-lab
-exploit-lab Exploits Python cve-2019-0708 β by HackHeart π§ Code Review & Porting - Python 2 β Python 3 This exploit was originally written in Python 2, which is no longer supported by modern systems. To ensure compatibility and maintain future-proof tooling, the entire codebase has been carefull...
CVE-2026-42167
CVE-2026-42167: SQL Injection in ProFTPD modsql π Executive Summary CVE-2026-42167 is a critical SQL injection vulnerability in ProFTPD's modsql module that allows authentication bypass , backdoor user injection , and remote code execution RCE. Attribute| Value ---|--- Type| SQL Injection CWE-89...
GhostLock-for-OnePlus15T
GhostLock β OnePlus 15T Kernel exploit targeting locked-bootloader OnePlus 15T devices. Uses CVE-2026-43499 to obtain root access without unlocking the bootloader or modifying boot.img. Authorized security research and educational purposes only. Modified from the originalGhostLock-for-OnePlus...