The vulnerability of the Directum HR Pro system, which exists due to insufficient verification of input data, allows a perpetrator to disclose protected information.

The vulnerability of the Directum HR Pro system exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information by sending a specially crafted POST request...

The vulnerability of the Directum Web Agent component of the Directum RX system, which arises due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Directum Web Agent component of the Directum RX system exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted file...

cve-2015-5477

cve-2015-5477 PoC para DoS por aserción TKEY en BIND9 CVE-2015-5477 $ ps awux | grep -v grep | grep bind bind 2373 0.0 2.2 141164 13424 ? Ssl 14:58 0:00 /var/named/chroot/sbin/named -u bind -t /var/named/chroot -c /etc/named.conf $ python tkill.py 127.0.0.1 Begin emission: ..Finished to send 1...

CVE-2021-33044

CVE-2021-33044 Dahua IPC/VTH/VTO devices auth bypass exploit About: The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. use - python3 dahuaexploit.py...

exploit-CVE-2016-7434

Exploit DoS de ntpd CVE-2016-7434 Ntpd sufre una desreferencia de puntero nulo que es posible provocar para hacer fallar la aplicación. Según NTP.org, «Si ntpd está configurado para permitir solicitudes de consulta mrulist desde un servidor que envía un paquete malicioso manipulado, ntpd fallará ...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - parece aterrador. Todavía recuerdo Stagefright y las vulnerabilidades/bugs de PNG... Con CVE-2019-2107 el decodificador/códec se ejecuta bajo el usuario mediacodec y con un video adecuadamente "elaborado" con tiles habilitados - pspps-i1tilesenabledflag...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 python3 check 0708 A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is...

CVE-2026-96422

A flaw was found in Wireshark. This vulnerability allows an attacker to cause a Denial of Service DoS by injecting crafted network packets or convincing a user to open a malicious packet capture file. An assertion failure within the Frame protocol metadissector triggers an unexpected application...

CVE20265172poc

CVE20265172poc CVE-2026-5172: desbordamiento de búfer en extractaddresses en un PoC de registro de recursos manipulado Topología: leer aquí https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Pasos​ 1. vi /etc/dnsmasq.conf​ port=5353...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - parece aterrador. Todavía recuerdo Stagefright y los bugs/vulns de PNG... Con CVE-2019-2107 el decodificador/códec se ejecuta bajo el usuario mediacodec y con un vídeo debidamente "manipulado" con tiles habilitados - pspps-i1tilesenabledflag puedes...

CVE-2023-3519

CVE-2023-3519 This Nuclei template checks for the presence of the CVE-2023-3519 vulnerability in a target web server. Vulnerability CVE-2023-3519 is a vulnerability that allows unauthenticated remote code execution in the Citrix Application Delivery Controller ADC and Gateway appliances. An...

objdump-Out-Of-Bounds-write

GNU Binutils objdump — OOB Write → FSOP → Arbitrary Code Execution Target: GNU Binutils all versions through HEAD — objdump Environment: Debian 13 Trixie, glibc 2.41, x8664 Impact: Arbitrary code execution Vector: Crafted ELF file processed by objdump -g ASLR: Bypassed deterministic mmap delta...

CVE-2026-41096

CVE-2026-41096 - PoC de Crash Desbordamiento de montón en DnsRawTruncateMessageForUdp dnsapi.dll. Una respuesta DNS manipulada con QDCOUNT=0 y un registro OPT grande provoca un desbordamiento de montón de 604 bytes cuando la lógica de truncamiento calcula mal el puntero de destino. Aviso de MSRC:...

NFSundown

Resumen Exploit de prueba de concepto para NFSundown CVE-2025-38089. Puede provocar de forma remota la caída del kernel en un servidor NFS. Detalles Un atacante remoto puede provocar una desreferencia de puntero nulo en el kernel y causar su caída enviando una solicitud RPC especialmente...

CVE-2021-22204-exiftool

CVE-2021-22204-exiftool Python exploit for the CVE-2021-22204 vulnerability in Exiftool. About the vulnerability The CVE-2021-22204 was discovered and reported by William Bowling. @wcbowling This exploit was made by studying the exiftool patch after the CVE was already reported. Pre-requisites...

react2shell

React2Shell - PoC del Exploit CVE-2025-55182 Un exploit de prueba de concepto para CVE-2025-55182, una vulnerabilidad crítica de Ejecución Remota de Código en aplicaciones Next.js que utilizan React Server Components. ⚠️ AVISO LEGAL ESTA HERRAMIENTA ES SOLO PARA PRUEBAS DE SEGURIDAD EDUCATIVAS Y...

Cve-2024-38063

CVE-2024-38063 Description This repository contains details and potential exploit code for CVE-2024-38063, a critical Windows TCP/IP Remote Code Execution RCE vulnerability. The vulnerability allows an unauthenticated attacker to execute arbitrary code on the target system through specially craft...

CVE-2017-7529

CVE-2017-7529 Las versiones de Nginx desde la 0.5.6 hasta la 1.13.2 inclusive son vulnerables a una vulnerabilidad de desbordamiento de enteros en el módulo de filtro de rangos de nginx, lo que resulta en la fuga de información potencialmente sensible provocada por una solicitud especialmente...

CVE-2023-38831

CVE-2023-38831 PoC Prueba de Concepto Este es un exploit fácil de usar para CVE-2023-38831, una vulnerabilidad que afecta a versiones de WinRAR anteriores a la 6.23. Se ha identificado una vulnerabilidad explotable en RARLabs WinRAR versiones anteriores a la 6.23. Esta vulnerabilidad permite a lo...

CVE-2024-38063

CVE-2024-38063 - Windows TCP/IP Remote Code Execution Vulnerability Research Comprehensive research to save you time, energy, sanity, & understanding. I want to start this off by saying that this specific CVE is like many in that due to its high severity score, it has gained an enormous amount...