pocs

Proof of Concept Collection Consolidated repository of proof-...

CVE-2026-87726

Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software...

CVE-2026-87726

Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software...

CVE-2026-87726

Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software...

CVE-2026-87679

When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...

CVE-2026-87680

A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters...

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

EUVD-2026-94655

An Access Control Bypass vulnerability exists in the Role-Based Access Control RBAC validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management protocol operations, the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks...

CVE-2026-87681

An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1 . The flaw occurs because the RBAC engine incorrectly categorizes non-standard action opcodes during permission checks while processing specific mana...

CLEANSTART-2026-EQ87084 Connect2id Nimbus JOSE+JWT before v7

Security vulnerability affects the apache-hive package. Connect2id Nimbus JOSE+JWT before v7...

CLEANSTART-2026-FI29300 Connect2id Nimbus JOSE + JWT 10

Security vulnerability affects the apache-hive package. Connect2id Nimbus JOSE + JWT 10...

CLEANSTART-2026-NG64377 Unbounded memory allocation in Google Guava 11

Security vulnerability affects the apache-hive package. Unbounded memory allocation in Google Guava 11...

CLEANSTART-2026-CO70761 In Connect2id Nimbus JOSE+JWT before 9

Security vulnerability affects the apache-hive package. In Connect2id Nimbus JOSE+JWT before 9...

CLEANSTART-2026-IG26224 FasterXML jackson-databind through 2

Security vulnerability affects the apache-hive package. FasterXML jackson-databind through 2...

CLEANSTART-2026-FS95827 JMSAppender in Log4j 1

Security vulnerability affects the apache-hive package. JMSAppender in Log4j 1...

CLEANSTART-2026-BY06273 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

Security vulnerability affects the apache-hive package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...

CLEANSTART-2026-IQ25144 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

Security vulnerability affects the apache-hive package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...

CLEANSTART-2026-LY33744 HttpObjectDecoder

Security vulnerability affects the apache-hive package. HttpObjectDecoder...

CLEANSTART-2026-BW02780 Netty is an asynchronous, event-driven network application framework

CVE-2026-42584 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...