PoC-CVE-2020-9715

CVE-2020-9715 EDR Validation PoC Use-after-free in Adobe Acrobat Reader DC's EScript.api ESObject cache. For authorized red team EDR testing only. Vulnerability Adobe Acrobat Reader DC = 2020.009.20063. The EScript engine caches data ESObjects with keys that preserve the original encoding ANSI or...

WordPress Database Addon For WPForms ( wpforms entries ) plugin < 1.1.1 - Arbitrary Form Entry Deletion vulnerability

Arbitrary Form Entry Deletion vulnerability discovered by Rik de Kok in WordPress Plugin Database Addon For WPForms wpforms entries versions 1.1.1...

Docling imports plugin entry points before the allow_external_plugins check

Summary allowexternalplugins=False the default, and the CLI default is meant to restrict docling to its own model plugins. However, docling's plugin factories call pluggy's loadsetuptoolsentrypoints, which imports every module registered under docling's plugin entry-point group. Only afterwards...

EUVD-2026-92805

Docling imports plugin entry points before the allowexternalplugins check...

CVE-2026-107215

The Excelize Go library (versions 2.3.1 to 2.11.0 ) is vulnerable to a remote panic or Out-of-Memory (OOM) Denial of Service due to improper validation of CFB directory-entry sizes. The extractPart function trusts the streamSize for EncryptionInfo and EncryptedPackage allocations before validatin...

CVE-2025-70994

CVE-2025-70994: Weak Authentication in Yadea T5 Electric Bicycle !WARNING This repository is published strictly for educational and academic security research purposes. The information and proof-of-concept code provided here are intended to demonstrate a known cryptographic flaw CWE-1390 to assis...

CVE-2022-25927-test

This repository does not have a README...

CVE-2026-105138

The Obot platform versions 0.12.0 before 0.26.2 is vulnerable to a credential exposure flaw in the MCP Catalog Entry API . Due to insufficiently protected credentials, authenticated basic users with access to an entry can perform a GET request to /api/all-mcps/entries/{entry_id}. This action allo...

CVE-2026-105138 Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API

Obot 0.12.0 before 0.26.2 contains an insufficiently protected credentials vulnerability that allows authenticated users to read static secrets set on MCP catalog entries by admins or power users. Basic users granted an entry by access control rules can request GET /api/all-mcps/entries/entryid t...

CVE-2026-105138 Obot 0.12.0 before 0.26.2 Credential Exposure via MCP Catalog Entry API

Obot 0.12.0 before 0.26.2 contains an insufficiently protected credentials vulnerability that allows authenticated users to read static secrets set on MCP catalog entries by admins or power users. Basic users granted an entry by access control rules can request GET /api/all-mcps/entries/entryid t...

CVE-2019-3396TEST

CVE-2019-3396TEST TEST...

CVE-batdappboomx

CVE ID CVE-2022-27134 PRODUCT batdappboomx is a public smart contract running in the EOSIO blockchain. This smart contract rewards cryptocurrency to its participants if they pay some cryptocurrency before. Version The latest version of this smart contract. The sha256 hash code of the smart contra...

CVE-2017-20192-formidable-forms

CVE-2017-20192 — Formidable Forms WordPress — Vulnerable Docker Lab Reproducible Docker lab for CVE-2017-20192 Formidable Forms 2.05.03 stored XSS. Quickstart docker compose up -d --build Target: http://127.0.0.1:18080 Validate lab helper This helper script: submits a crafted entry unauthenticate...

PT-2026-107488

Obot 0.12.0 before 0.26.2 contains an insufficiently protected credentials vulnerability that allows authenticated users to read static secrets set on MCP catalog entries by admins or power users. Basic users granted an entry by access control rules can request GET /api/all-mcps/entries/entry id ...

disable-RegisterSpoolerRemoteRpcEndPoint

disable-RegisterSpoolerRemoteRpcEndPoint Workaround for Windows Print Spooler Remote Code Execution VulnerabilityCVE-2021-34527. See: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Update 2021-07-08: Microsoft released a patch Microsoft already released a patch for this...

CVE-2026-40807

Unauthenticated Cross Site Scripting XSS in CF7 Views Complete Entry Management for Contact Form 7 = 3.2.6 versions...

CVE-2026-98338

The Linux kernel contains a race condition in the cfg80211 wireless subsystem when joining an IBSS . The issue occurs because the system previously recorded only the BSSID/channel and performed a lookup later; however, a new scan with NL80211_SCAN_FLAG_FLUSH could remove the BSS entry before proc...

CVE-2026-98338 wifi: cfg80211: ibss: ref BSS entry for joined event

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ibss: ref BSS entry for joined event When the IBSS is joined, we only record the BSSID/channel in the event and look up the BSS entry when processing it. However, that's racy, e.g. a new scan with...

EUVD-2026-93324

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: don't filter by BSS type when removing stale entries When an assoc AP switches to a channel that already has a BSS entry, cfg80211updateassocbssentry removes that entry before rehashing the real one, since the two...

CVE-2026-98338

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: ibss: ref BSS entry for joined event When the IBSS is joined, we only record the BSSID/channel in the event and look up the BSS entry when processing it. However, that's racy, e.g. a new scan with...