453910 matches found
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. The activity, observed by Mandiant Consulting and Google Threat Intelligence Group GTIG in September 2026...
external_expat_2.1.0_CVE-2022-43680
Expat, Release 2.1.0 This is Expat, a C library for parsing XML, written by James Clark. Expat is a stream-oriented XML parser. This means that you register handlers with the parser before starting the parse. These handlers are called when the parser discovers the associated structures in the...
OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted
A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 as it released fixes. DTLS, the TLS variant used for UDP traffic, resends a handshake message if no reply arrives before the timer expires. The leak or crash...
CVE-2025-13401-XSS-Stored
Proof of Concept: Stored XSS in Autoptimize tags for images found in the content when image optimization or preloading is enabled. In version 3.1.13, the function uses a "blacklist" approach via pregreplace to remove specific attributes like title, alt, class, id, width, and height from the...
CVE-2026-102510 Apache PLC4X: Go binding: unbounded allocation and framing failures on wire-controlled lengths
Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size Value in the Go implementation of Apache PLC4X PLC4Go allow a malicious device, or an attacker able to inject network traffic, to crash or exhaust the memory of the client...
CVE-2026-102510 Apache PLC4X: Go binding: unbounded allocation and framing failures on wire-controlled lengths
Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size Value in the Go implementation of Apache PLC4X PLC4Go allow a malicious device, or an attacker able to inject network traffic, to crash or exhaust the memory of the client...
CVE-2026-102510
The Apache PLC4X Go binding (PLC4Go ) is vulnerable to Integer Overflow , Improper Validation of Array Index , Uncontrolled Recursion , and Memory Allocation with Excessive Size Value . These flaws allow a malicious device or an attacker capable of injecting network traffic to exhaust memory or c...
EUVD-2026-89679
Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excessive Size Value in the Go implementation of Apache PLC4X PLC4Go allow a malicious device, or an attacker able to inject network traffic, to crash or exhaust the memory of the client...
cve-2022-32224-rails
CVE-2022-3222 ActiveRecord Serialization Behavior Verification https://discuss.rubyonrails.org/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017 https://api.rubyonrails.org/classes/ActiveRecord/AttributeMethods/Serialization/ClassMethods.html...
PoC-RCE-CVE-2025-55182
๐ฅ RSC RCE Exploit Toolkit Advanced exploitation toolkit for React Server Components Remote Code Execution vulnerabilities For authorized penetration testing and security research only Features โข Installation โข Usage โข Shodan Integration โข Examples โข Disclaimer ๐ Table of Contents Overview...
CLSA-2026-1790754735 TuxCare security update for pillow (8 CVEs)
TuxCare rebuilt pillow to address 8 CVEs. Fixed in 8.4.0.post8+tuxcare...
CVE-2025-65018_Exploit_Challenge
CVE-2025-65018 CTF Challenge: "PNG Panic" This challenge is based on a real-world buffer overflow vulnerability in libpng specifically dealing with the simplified API pngimagefinishread when handling 16-bit interlaced images. ๐ฉ Challenge Goal You are provided with a vulnerable binary victim that...
cve-2025-66478
CVE-2025-55182 This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerabilities affecting React Server Components and Next.js. !Warning This setup is intentionally vulnerable and must never be exposed to the public...
gr-PHYSEC
gr-PHYSEC: ็ฉ็ๅฑคใปใญใฅใชใใฃๅใGNU Radioใขใธใฅใผใซ ใใฎGNU Radioใขใธใฅใผใซใฏใๆทฑๅฑคๅญฆ็ฟใขใใซใไฝฟ็จใใ็ฉ็ๅฑคใปใญใฅใชใใฃใขใใชใฑใผใทใงใณๅใใฎใใฃใใซใใฃใณใฌใผใใชใณใใฃใณใฐๆฉ่ฝใๆไพใใพใใ ๆฉ่ฝ ใใฃใใซใใฃใณใฌใผใใชใณใใฃใณใฐ : IQใตใณใใซใใๅบๆใฎใใฃใใซ็นๆงใๆฝๅบ ๆทฑๅฑคๅญฆ็ฟ็ตฑๅ : ็นๅพดๆฝๅบใฎใใใซๅญฆ็ฟๆธใฟใขใใซ๏ผQExtractor.h5๏ผใไฝฟ็จ ็นๅพด้ๅญๅ : ๆฝๅบใใใ็นๅพดใใใคใใชๅคใซๅคๆ ใใฉใคใใทใผๅขๅน : ้ต็ๆใฎใใใซๆๅทๅญฆ็ใใใทใฅ๏ผSHA3-512๏ผใ้ฉ็จ ใชใขใซใฟใคใ ๅฆ็ :...
CVE-2026-87902
CVE-2026-87902 - WordPress Core ๆช่ช่จผ LFI โ RCE ๆค่จผใฉใ CVE-2026-87902 GHSA-7hp8-65ch-5whp ใใใซใผใใใใฏๅฐ็จใฎ้้ขใใใ Docker ใฉใใงๅ็พใปๆค่จผใใใใใฎใปใญใฅใชใใฃใชใตใผใ่ณๆใงใใใใใฏ WordPress ใณใขใฎใใผใธใใณใใฌใผใ่งฃๆฑบใซใใใๆช่ช่จผใฎใญใผใซใซใใกใคใซใคใณใฏใซใผใธใงใณใงใใใใชใขใผใใณใผใๅฎ่กใซใจในใซใฌใผใๅฏ่ฝใงใใ ๅฝฑ้ฟใๅใใใใผใธใงใณ: WordPress 4.7.0 ใใ 7.1.1 ใในใฆใฎใกใณใใใณในใใฉใณใ ไฟฎๆญฃๆธใฟ: 7.1.2 ใใใณใใฉใณใใใจใฎใใใฏใใผใ...
CVE-2017-0781
CVE-2017-0781 PoC Overview This is an implementation of the CVE-2017-0781 Android heap overflow vulnerability described in the Blueborne whitepaper released by Armis. Further reading: https://www.armis.com/blueborne/ In the current state, this code only demonstrates the overflow and the ability o...
CVE-2016-15041-mainwp-dashboard
CVE-2016-15041 Lab - MainWP Dashboard Stored XSS Vulnerable lab for CVE-2016-15041: Unauthenticated stored XSS in MainWP Dashboard WordPress plugin = 3.1.2. Quickstart docker compose up -d --build Wait 30 seconds for auto-setup. The lab prints a banner when ready: docker compose logs -f wordpress...
cve-2019-14206-poc
CVE-2019-14206 - Adaptive Images for WordPress Arbitrary File Deletion ๐ Index 1. About the Vulnerability 2. Prerequisites 3. Installation 4. Testing Methods Quick Test Full Test with Docker Test with Nuclei Manual Test 5. Interpreting Results 6. Cleanup 7. Troubleshooting 8. Mitigation 9. Legal...
CVE-2025-14847
๐ MongoDB Scanner โ Run Notes Script Name mongoexposurescanner.py 1. Prerequisites Python 3.9+ Network access to target hosts Approved scope for scanning Verify Python: python3 --version 2. Files Used File| Purpose ---|--- mongoscanner.py| Scanner script targets.txt| Target hosts and ports...
Multiple vulnerabilities impact AIX due to OpenSSL
IBM SECURITY ADVISORY First Issued: Wed Sep 30 06:56:20 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/openssladvisory49.asc Security Bulletin: Multiple vulnerabilities impact AIX due to OpenSSL...