19289 matches found
Exploit for Out-of-bounds Read in Citrix Netscaler_Application_Delivery_Controller
CVE-2025-5777 – Citrix NetScaler Memory Leak Updated PoC Th...
GHSA-RRGF-HCR9-JQ6H TinyScientist has Path Traversal Vulnerability in PDF Review Function (CWE-22)
Description A critical path traversal vulnerability CWE-22 has been identified in the reviewpaper function in backend/app.py. The vulnerability allows malicious users to access arbitrary PDF files on the server by providing crafted file paths that bypass the intended security restrictions. Impact...
Exploit for Link Following in 7-Zip
CVE-2025-55188-7z-exploit --- 7-Zip Symlink Arbitrary File...
Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape
Titles: Microsoft Edge Renderer Process Mojo IPC 134.0.6998.177 - Sandbox Escape Author: nu11secur1ty Date: 08/07/2025 Vendor: Microsoft Software: https://www.microsoft.com/en-us/software-download/windows11 Reference: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49730...
Jetty 10.0.6 HTTP/2 Stream Exhaustion Denial of Service
Jetty version 10.0.6 is vulnerable to a denial of service condition via HTTP/2 stream exhaustion. By opening and maintaining a large number of idle HTTP/2 streams, an attacker can exhaust server resources and cause the service to become unresponsive. This archive includes a Ruby Metasploit...
Exploit for Incorrect Authorization in Sudo_Project Sudo
sudo CVE-2025 Toolkit Unified scanner, benign proof-of-...
Insecure Inherited Permissions
Overview Affected versions of this package are vulnerable to Insecure Inherited Permissions in the LocalStorage handler. An attacker can gain unauthorized access to sensitive information or modify data by exploiting improper permission enforcement in this component. Remediation There is no fixed...
Exploit for Improper Handling of Exceptional Conditions in Apache Struts
pocsuite3 Legal Disclaimer Usage of pocsuite3 for attacking targets without prior mutual consent is illegal. pocsuite3 is for security testing purposes only 法律免责声明 未经事先双方同意，使用 pocsuite3 攻击目标是非法的。 pocsuite3 仅用于安全测试目的 Overview pocsuite3 is an open-sourced remote vulnerability testing and...
Exploit for Code Injection in Xwiki
CVE-2025-24893-P...
CVE-2025-55156
creationtimestamp| type| source ---|---|--- 2025-08-09 22:45:37+00:00| published-proof-of-concept| https://github.com/pyload/pyload/security/advisories/GHSA-pwh4-6r3m-j2rf...
CVE-2024-0000
creationtimestamp| type| source ---|---|--- 2025-08-09 15:00:07+00:00| published-proof-of-concept| Telegram/cnPJN6mfEy0qs6POD0JOTxjWLJtRLn4F7YmOhIb54r6ZiM...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
Sudo CVE-2025-32463 — PoC !GitHub last commithttps://img.s...
Directory Traversal
Overview tiny-scientist is an A lightweight framework for building research agents Affected versions of this package are vulnerable to Directory Traversal via the reviewpaper function in the backend/app.py file. An attacker can access arbitrary PDF files on the server by supplying crafted file...
CVE-2025-55152
creationtimestamp| type| source ---|---|--- 2025-08-08 23:11:09+00:00| published-proof-of-concept| https://github.com/oakserver/oak/security/advisories/GHSA-r3v7-pc4g-7xp9...
Exploit for Code Injection in Xwiki
PoC for CVE-2025-24893 — XWiki Remote Code Execution Safe PoC...
Exploit for CVE-2025-7769
CVE-2025-7769 – Remote Command Injection in mobileapi Des...
Exploit for CVE-2025-4126
POC-CVE-2025-4126 smart contract reentrancy attack vulnerabili...
CVE-2025-54798
creationtimestamp| type| source ---|---|--- 2025-08-06 07:22:36+00:00| published-proof-of-concept| https://github.com/raszi/node-tmp/security/advisories/GHSA-52f5-9888-hmc6...
📄 Oracle 19c / 21c Denial of Service
Oracle Database versions 19c and 21c proof of concept exploitation details for CVE-2023-22077. It illustrates that even though the "Lockdown Profile" security feature was in-place to restrict OS accessibility, an attacker is able to cause a denial of service attack that can impact all customers...