CVE-2023-49070

ofbiz-xmlrpc-rce CVE-2023-49070 PoC for the Apache OFBiz XML-RPC pre-auth deserialization RCE tracked as CVE-2023-49070: an authentication-bypass path unlocks the legacy /webtools/control/xmlrpc endpoint, which deserializes an attacker- controlled Java object smuggled inside an XML-RPC parameter...

CVE-2023-41508

CVE-2023-41508 CVE-2023-41508 - A hard-coded password in Super Store Finder v3.6 allows attackers to access the administration panel. Vulnerability Type Incorrect Access Control Vendor of Product Super Store Finder Affected Product Code Base Super Store Finder - Affected version 3.6 or below. Fix...

GHSA-R925-MGVR-H9CC Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

Description HeaderUtils::split parsed header values with a pattern whose token alternative also matched whitespace, followed by a ?!\s lookbehind. A run of whitespace placed before a separator could be divided among the iterations of the enclosing repetition in exponentially many ways, and the...

EUVD-2026-102102

Symfony: ReDoS in HeaderUtils::split Reachable Through the Cache-Control Request Header...

Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

Description HeaderUtils::split parsed header values with a pattern whose token alternative also matched whitespace, followed by a ?!\s lookbehind. A run of whitespace placed before a separator could be divided among the iterations of the enclosing repetition in exponentially many ways, and the...

CVE-2021-40346

CVE-2021-40346 CVE-2021-40346 PoC HAProxy HTTP Smuggling For educational purposes only Setup $ docker build -t cve-2021-40346 . $ docker run --name poc -p 8000:80 -d --rm -it cve-2021-40346 4941e9f23508b497e4cbe334a75e7cdb84c83478522ed85f48db3477f97a6fb4 Test Confirm /admin is denied. $ curl...

provisioner

Provisioner Overview Provisioner is a developer-focused provisioning sidekick for single-board computers SBCs, particularly U-Boot-based platforms. It provides a self-contained environment to: Remotely access boards Automate bring-up workflows Provision kernels and root filesystems Execute flashi...

CVE-2026-1337

CVE-2026-1337 - Neo4j - Log Injection Log injection by an authenticated user is possible in the Neo4j query.log when Neo4j is not configured to be in json format. Summary Neo4j does not escape control characters in the metadata field when of a bolt transaction. An autenticated user could send...

CVE-2026-109089

A buffer overflow when handling DEVICERESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious X server...

Vision-MSI-Thermal-Control

Vision MSI Thermal Control MSI Modern 15H AI C1MG-096IT Linux thermal management - Reverse engineered EC control with fan profiles and battery threshold 🎯 Purpose of this Project This application was born out of necessity for MSI laptop users on Linux. The journey began when I discovered that...

HARDE

HARDE: Optimizing Agent Harnesses for Runtime Risk Detection and Execution Control Code release for HARDE: Optimizing Agent Harnesses for Runtime Risk Detection and Execution Control. The repository contains two complementary entry-point families: domains/: the Meta-Harness baseline and the two...

CVE-2023-23752

Joomla! options Arguments url: Root URL base path of the target Joomla! site, including the HTTP scheme, port, and root folder if necessary. --debug: Optional. If set, the script will print debug information, including the fetched data. --no-color: Optional. If set, disables colored output for...

CVE-2023-22515

CVE-2023-22515 CVE-2023-22515 Confluence Broken Access Control Exploit Vulnerability Description Confluence Unauthorized Addition of Admin User USAGE Build Source compilation go mod init CVE-2023-22515 go mod tidy go build -ldflags="-s -w" -trimpath -o CVE-2023-22515.exe .\CVE-2023-22515.go Run...

CVE-2026-118170

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document...

CVE-2026-118170 CVE-2026-118170

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document...

EUVD-2026-111346

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document...

CVE-2026-118170

The strapi/review-workflows package is subject to a broken access control vulnerability. The flaw allows unauthorized updates to be performed because the system fails to verify if the caller possesses the necessary update rights for the underlying document. Remediation information is referenced i...

CVE-2026-118170 CVE-2026-118170

The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document...

CVE-2021-41773-i-

CVE-2021-41773 CVE-2021-41773 POC with Docker Configuration To customize the httpd.conf file, change line 251 in the section from Require all denied to Require all granted. AllowOverride none Require all granted Create a Dockerfile in your project FROM httpd:2.4.49 COPY ./httpd.conf...

cve-2026-49975-http2bomb_reproduction

CVE-2026-49975 HTTP/2 Bomb Complete Reproduction Guide Based on QiAnXin CERT Advisory + Calif Original Research ================================================================ I. Vulnerability Overview CVE-2026-49975 is a critical denial-of-service DoS vulnerability in HTTP/2 server and proxy...