CommuniGate Pro Access Control Unauthorized Modification

The vulnerability of the CommuniGate Pro mail server arises from insufficient access control checks when processing specially crafted requests. Exploiting this vulnerability allows a malicious actor to perform unauthorized modifications to the server’s data remotely...

Bestechic BES2300 Bluetooth Audio SoC Buffer Overflow DoS

The vulnerability of the btmaclhandle function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted L2CAP packet...

Bestechnic BES2300 Bluetooth Audio SoC Buffer Overflow DoS

The vulnerability of the l2caphandledata function in the microprogramming-based audio chipset of Bestechnic BES2300 Bluetooth Audio SoC is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially...

Bestechic BES2300 Bluetooth Audio SoC Heap Buffer Overflow DoS

The vulnerability of the avrcpindicateprocessdataind function in the microprogramming-based audio chipset of Bestechnic BES2300 Bluetooth Audio SoC is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafte...

Directum Web Agent Code Execution

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

Directum HR Pro Disclosure

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

ThrottleBlood.sys RCE

The vulnerability of the MmMapIoSpace function in the ThrottleBlood.sys driver, as part of the ThrottleStop utility, is related to open IOCTLs with insufficient access control. Exploiting this vulnerability could allow an attacker to enhance their privileges, execute arbitrary code, or cause...

hekate

Hekate - A VMWare Workspace ONE Access Remote Code Execution Exploit Steven Seeley of Qihoo 360 Vulnerability Research Institute Original rogue MySQL server by LandGrey Details Hekate is pronounced as heh-ka-teh Date: Tue Feb 22 13:37:00 CST 2022 Version: 21.08.0.1 latest File:...

CVE-2024-1512

CVE-2024-1512 Proof of Concept Vulnerability Overview CVE-2024-1512 exposes a critical vulnerability in the MasterStudy LMS WordPress Plugin, specifically within the implementation of the /lms/stm-lms/order/items REST route. The issue arises from the plugin's failure to properly escape the 'user'...

CVE-2022-48565-POC

CVE-2022-48565 PoC Introduction This is a Proof of Concept PoC demonstrating the vulnerability CVE-2022-48565 , which is based on unsafe deserialization of Plist files in Python. By processing specially crafted Property List Plist files, an attacker can execute arbitrary code on the target system...

CVE-2026-21643

🚨 CVE-2026-21643 "FortiGhost" : Pre-Auth SQLi RCE in FortiClientEMS Unauthenticated SQL Injection in FortiClientEMS 7.4.4 Potential Remote Code Execution via crafted HTTP requests to the admin GUI 📋 Overview CVE-2026-21643 is a critical SQL injection vulnerability CWE-89 affecting Fortinet...

CVE-2020-9484

Remote Code Execution Exploit in Apache Tomcat 9.0.27 Apache Tomcat 9.0.27 is vulnerable to Remote Code Execution with the CVE-ID CVE-2020-9484. Other versions may be affected as well. Tested on Kali 2020.4 and JDK 8. This bash script is a simpel proof-of-concept. For educational purpose only...

cmcp

cMCP: Confidential MCP Runtime Community updates and contributor highlights: AgenTrust on LinkedIn. Enforce MCP tool policy inside a TEE, where the agent it governs cannot reach it Quick Start · Architecture · Configuration · CLI · Changelog Developer Preview - launched at the Confidential...

react2shell-scanner

react2shell-scanner A command-line tool for detecting CVE-2025-55182 and CVE-2025-66478 in Next.js applications using React Server Components. For technical details on the vulnerability and detection methodology, see our blog post:...

PSTrojanFile

PSTrojanFile Windows PowerShell Filename and Defender Anti-Malware API - Code Execution POC Discovery: John Page aka hyp3rlinx 2019 and revisted 2023 Updated Dec 24, 2023 Bypassing single quotes obstacle in PowerShell for code exec and bonus PS Windows Event log fail! Semicolon and friend "&"...

CVE-2019-0232

Exploit for Apache Tomcat CVE-2019-0232 This script exploits the CVE-2019-0232 vulnerability in Apache Tomcat, which allows remote code execution through the improper handling of the ism.bat script. The script leverages a reverse shell technique using certutil and nc.exe Netcat to gain remote...

CVE-2023-4357-Exploitation

CVE-2023-4357-Exploitation Network Security Project Description Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page. Reproduce Set up the Environment Download Chrome on Linux...

react2shell

React2Shell - CVE-2025-55182 Exploit PoC A proof-of-concept exploit for CVE-2025-55182, a critical Remote Code Execution vulnerability in Next.js applications using React Server Components. ⚠️ DISCLAIMER THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY. ❌ DO NOT use against system...

CVE-2026-20700

dyld-signing-oracle-poc A controlled exploration of dyld's page-in linking and chained fixup machinery as a PAC signing oracle, in the context of CVE-2026-20700. On arm64e, every function pointer is hardware-authenticated. The goal here is to show that dyld itself can be directed — through a...

CVE-2025-66850

Finding Within the ‘LibreNMS’ application, we discovered a reflected Cross-Site Scripting vulnerability; this vulnerability exists in the routing module’s protocol parameter, allowing an attacker to render malicious JavaScript in a victim’s browser. This vulnerability affects all versions from...