CVE-2026-70141

An out-of-bounds read vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside the intended memory boundaries. No specific exploit details or in-the-wild exploitation reports are prov...

CVE-2026-70115

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or patch versions are provided in the documents.

CVE-2026-70123

A numeric truncation error exists in the Microsoft Graphics Component , which can be exploited by an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-197 (Numeric Truncation Error) and CWE-122 (Heap-based Buffer Overflow). The impact includes hi...

CVE-2026-105731

The Microsoft Graphics Component contains a vulnerability where the use of uninitialized resources allows an authorized attacker to perform a local information disclosure . The impact is classified as having high confidentiality impact with a CVSS 3.1 base score of 5.5 . No specific exploit detai...

CVE-2026-110239 Rapyd Admin before 9.20.0 Stored XSS via rich-text Component

Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...

CVE-2026-110239

The Rapyd Admin software versions prior to 9.20.0 is vulnerable to a stored cross-site scripting (XSS) flaw within the x-rpd::rich-text Blade component. The root cause is the component's failure to sanitize bound model values, which are instead output as raw HTML. An authenticated user can exploi...

CVE-2026-110239 Rapyd Admin before 9.20.0 Stored XSS via rich-text Component

Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...

CVE-2026-110249

The Thunderbird email client is vulnerable to a Denial of Service (DoS) attack via its Exchange email component . A malicious, compromised, or MITM-controlled Exchange server can return a crafted SOAP response containing an element with an excessive number of attributes. This causes Thunderbird's...

CVE-2020-14883

CVE-2020-14883 Oracle WebLogic Server Authenticated Remote Code Execution RCE Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily...

CVE-2016-4014

CVE-2016-4014 SAP Netweaver JAVA AS UDDI Component XXE POST /uddi/api/replication HTTP/1.1 Host: host Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Content-Type: text/xml;charset=UTF-8...

langflow-CVE-2026-17633-PoC

CVE-2026-17633 & CVE-2026-17632 — IBM Langflow OSS RCE For educational purposes only. Only use against systems you own or have explicit written authorization to test. 1. Introduction What is Langflow Langflow is an open-source low-code platform for building LLM-powered applications and AI agent...

Elasticsearch-CVE-2023-31419

Elasticsearch CVE 2023-31419 PoC...

samsung-bixby-command-execution-cve-2026-21055-improper-component-export

CVE-2026-21055 PoC — Samsung Bixby Improper Component Export Proof of Concept for CVE-2026-21055 : Improper export of Android application components in Samsung Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege. Overview This repository...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Office Graphics Elevation of Privilege Vulnerability

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network...

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

Windows Search Service Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...