17769 matches found
CVE-2026-33179 libfuse: NULL Pointer Dereference and Memory Leak in io_uring Queue Initialization
libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a NULL pointer dereference and memory leak in fuseuringinitqueue allows a local user to crash the FUSE daemon or cause resource exhaustion. When numaalloclocal fails during iouring queue entry...
CVE-2026-33490
creationtimestamp| type| source ---|---|--- 2026-03-20 17:34:15+00:00| published-proof-of-concept| https://github.com/h3js/h3/security/advisories/GHSA-2j6q-whv2-gh6w...
CVE-2026-29794
creationtimestamp| type| source ---|---|--- 2026-03-20 13:51:19+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-m547-hp4w-j6jx...
CVE-2026-33315
creationtimestamp| type| source ---|---|--- 2026-03-20 13:49:29+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-47cr-f226-r4pq...
Exploit for CVE-2026-21992
CVE-2...
Exploit for CVE-2026-3888
CVE-2026-3888-P...
Scriban has Uncontrolled Recursion in Parser Leads to Stack Overflow and Process Crash (Denial of Service)
Scriban is vulnerable to an uncontrolled process crash resulting in a Denial of Service. Because the recursive-descent parser does not enforce a default limit on expression depth, an attacker who controls template input can craft a heavily nested template that triggers a StackOverflowException. I...
CVE-2026-33314
creationtimestamp| type| source ---|---|--- 2026-03-19 17:55:53+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-q485-cg9q-xq2r...
CVE-2026-32889
creationtimestamp| type| source ---|---|--- 2026-03-19 16:10:20+00:00| published-proof-of-concept| https://github.com/tinytag/tinytag/security/advisories/GHSA-f4rq-2259-hv29...
📄 Casdoor 2.359.0 Cross Site Request Forgery
Casdoor version 2.359.0 suffers from a cross site request forgery vulnerability. This is an older vulnerability originally discovered in 2023 that they still have not addressed in later versions. Exploit Title: Casdoor 2.359.0 2026-03-18 - Cross-Site Request Forgery CSRF Application: Casdoor...
GHSA-479M-364C-43VC validateSignature Loop Variable Capture Signature Bypass in goxmldsig
Details The validateSignature function in validate.go goes through the references in the SignedInfo block to find one that matches the signed element's ID. In Go versions before 1.22, or when go.mod uses an older version, there is a loop variable capture issue. The code takes the address of the...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 Exploit Development Demo This repository demon...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache HTTP Server 2.4.49 Path Traversal / RC...
Exploit for Classic Buffer Overflow in Freefloat Freefloat_Ftp_Server
🛡️ Memory Corruption Research & Exploitation Lab CVE-2025-554...
Malicious code in manifest-confusion-poc-audit (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bdce3a4402dab0a3cd3ccff6522e439711936fb0c4077ea260dde4b8392cddc1 The package manifest-confusion-poc-audit was found to contain malicious code...
CVE-2026-32694
creationtimestamp| type| source ---|---|--- 2026-03-18 12:55:22+00:00| published-proof-of-concept| https://github.com/juju/juju/security/advisories/GHSA-5cj2-rqqf-hx9p...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache Path Traversal & RCE Internship Tas...
Exploit for OS Command Injection in Nagios Nagios_Xi
Nagios-CVE-2019-15949-RCE-Poc a python PoC for the CVE-2019-15...