19281 matches found
Forge JavaScript library impacted by a vulnerability in signature verification.
Overview The Forge JavaScript library provides TLS-related cryptographic utilities. A vulnerability that allows signature verification to be bypassed through crafted manipulation of ASN.1 structures, particularly in fields such as Message Authentication Code MAC data, was identified. Users of the...
š CZS CMS 1.3.0 Cross Site Request Forgery
This proof of concept leverages a known cross site request forgery vulnerability in CZS CMS version 1.3.0 to add an administrator. ============================================================================================================================================= | Title : CZS CMS v 1.3....
š macOS 18.3.2 VM_BEHAVIOR_ZERO_WIRED_PAGES Handling
A vulnerability exists in the way macOS handles VMBEHAVIORZEROWIREDPAGES combined with mmap + mlock + vmdeallocate on a read-only mapped file. A local attacker may trigger abnormal kernel behavior depending on system conditions. This proof of concept is purely academic and demonstrates a controll...
Exploit for Use of Uninitialized Resource in Microsoft
Proof-of-Concept exploit for the Untrusted Pointer Dereferenc...
CVE-2025-65672
creationtimestamp| type| source ---|---|--- 2025-11-24 21:00:05+00:00| published-proof-of-concept| Telegram/Du0MdwVxk-ma0lPRgOSkwKDcmvhNbHj6kmNSaYCuL7u0A...
CVE-2025-65669
creationtimestamp| type| source ---|---|--- 2025-11-24 21:00:05+00:00| published-proof-of-concept| Telegram/Du0MdwVxk-ma0lPRgOSkwKDcmvhNbHj6kmNSaYCuL7u0A...
CVE-2025-38678
creationtimestamp| type| source ---|---|--- 2025-11-24 15:00:07+00:00| published-proof-of-concept| Telegram/5Go4y9Sp59a8HRsoMaTj0X-e6nFTkvRgJdqk6vUB2AgWKv0 2025-11-27 07:58:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60913...
Exploit for CVE-2025-38678
CVE-2025-3...
Exploit for Injection in Oracle Agile_Plm
Auto-WebLogicScanner An automated WebLogic vulnerability dete...
Exploit for Use of Uninitialized Resource in Microsoft
Proof-of-Concept exploit for the Untrusted Pointer Dereferenc...
websocket-server-vuln-poc
websocket-server 0.6.4 ā Input Validation Vulnerability PoC...
Exploit for CVE-2025-63406
CVE-2025-63406 ā Security Research Proof-of-Concept PoC Thi...
CRLF-Base64-Injection
š„ CRLF + Base64 Injection Proof of Concept Author: Subir...
@hpke/core reuses AEAD nonces
Summary The public SenderContext Seal API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal calls. This can lead to complete loss of Confidentiality and Integrity of the produced messages. Details The SenderContext Seal implementation allows for concurrent...
CVE-2025-7892
creationtimestamp| type| source ---|---|--- 2025-11-20 16:16:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60310 2025-11-20 21:00:05+00:00| published-proof-of-concept| Telegram/nY5-0lCVx8RKsRPrkDgSLkXo8AbHt3usOoKy9LAJ3yK8Xw...
Exploit for Improper Handling of Length Parameter Inconsistency in Nvidia Cuda_Toolkit
CVE-2025-23247 Epic Collab with @reubensammut : as alaways :...
Exploit for CVE-2025-63499
CVE-2...
CVE-2025-63914
creationtimestamp| type| source ---|---|--- 2025-11-20 02:11:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60236 2025-11-20 09:00:14+00:00| published-proof-of-concept| Telegram/GmvoRp-ZTeQCHWxtyW7HXEFoLo07FBSobpKiaRjeTfDZGXg...