19272 matches found
EUVD-2020-30936
Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the 'Find Computer' feature that allows attackers to execute arbitrary code by overflowing the computer name input field. Attackers can craft a malicious payload that triggers a buffer overflow, enabling code executio...
CVE-2020-37042
Frigate Professional 3.36.0.9 contains a local buffer overflow in the Find Computer input field, enabling arbitrary code execution when a crafted payload overflows the computer name. In all connected sources, the vulnerability is demonstrated by launching the calculator as a proof of concept. The...
CVE-2020-37042
Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the 'Find Computer' feature that allows attackers to execute arbitrary code by overflowing the computer name input field. Attackers can craft a malicious payload that triggers a buffer overflow, enabling code executio...
nanshihui__PocCollect.e13e1379
PocCollect !Build Statushttp://nanshihui.github.io/public...
Exploit for CVE-2026-24102
This exploit for CVE-2026-24102 represents the pinnacle of the S...
📄 Microsoft Windows 11 build 10.0.27898.1000 Local Privilege Escalation
Proof of concept exploit designed to test a potential local privilege escalation vulnerability in Windows, specifically targeting a feature called AiRegistrySync. It checks if modifications made by a standard user in their own Registry profile can be automatically synchronized propagated into the...
deepHas vulnerable to Prototype Pollution via constructor.prototype
Summary A prototype pollution vulnerability exists in version 1.0.7 of the deephas npm package that allows an attacker to modify global object behavior. This issue was fixed in version 1.0.8. Details The vulnerability resides in the add function and indexer function implemented within deepHas.js...
Exploit for CVE-2026-24134
CVE-2026-24134-PoC Overview This repository contains the...
GHSA-VG9H-JX4V-CWX2 Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)
Summary The Unfurl web app enables Flask debug mode even when configuration sets debug = False. The config value is read as a string and passed directly to app.rundebug=..., so any non-empty string evaluates truthy. This leaves the Werkzeug debugger active by default. Details - unfurl/app.py:weba...
Exploit for CVE-2025-40554
CVE-2025-40554 – SolarWinds Web Help Desk Auth Bypass PoC Pro...
CVE-2020-37010 BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC)
BearShare Lite 5.2.5 contains a buffer overflow vulnerability in the Advanced Search keywords input that allows attackers to execute arbitrary code. Attackers can craft a specially designed payload to overwrite the EIP register and execute shellcode by pasting malicious content into the search...
Exploit for Deserialization of Untrusted Data in Facebook React
CVE-2025-55182-PoC-http-exec PoC terkait CVE-2025-55182 untu...
xtream-ui-security-audit
🔐 Xtream UI Security Audit & Exploitation Framework !Python...
📄 MaNGOSWeb 4.0.6 SQL Injection
MaNGOSWeb version 4.0.6 remote SQL injection proof of concept exploit. ============================================================================================================================================= | Title : MaNGOSWeb V4 4.0.6 Sql Injection | | Author : indoushka | | Tested on :...
PT-2026-6070
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 144.0.7559.132 Description A type confusion issue exists in the V8 engine within Google Chrome. This can lead to heap corruption when processing specially crafted HTML pages. A proof-of-concept PoC has been...
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
CVE-2026-21509-PoC Educational PoC for CVE‑2026‑21509...
CVE-2026-24767
creationtimestamp| type| source ---|---|--- 2026-01-28 11:30:15+00:00| published-proof-of-concept| https://github.com/nocodb/nocodb/security/advisories/GHSA-xr7v-j379-34v9...
CVE-2026-23892
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up to and including 1.11.5 are affected by a theoretical timing attack vulnerability that allows API key extraction over the network. Due to using character based comparison that short-circuits on the firs...