EUVD-2026-111225

Adobe Campaign Classic ACC is affected by an Improper Control of Generation of Code 'Code Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation o...

CVE-2026-105781

Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) vulnerability (CWE-89). This flaw could allow an attacker to execute arbitrary SQL commands, potentially leading to arbitrary code execution in the context of the curr...

CVE-2026-104351

Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code (Code Injection) vulnerability (CWE-94). A low-privileged attacker can exploit this flaw to achieve arbitrary code execution in the context of the current user without requiring any user interaction. This vulner...

CVE-2026-104354 Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to...

CVE-2025-24893-PoC

CVE-2025-24893 - XWiki Remote Code Execution RCE An updated proof-of-concept PoC exploit for CVE-2025-24893 , a critical unauthenticated RCE vulnerability in XWiki. This version improves on the original by allowing arbitrary shell command execution and clean reverse shell injection. By:...

log4j-rce-CVE-2021-44228

Overview This is a project to actually test the remote code execution vulnerability CVE-2021-44228 in log4j2. Start the Containers docker-compose up It takes a little time for the log4j container to become usable after starting. Check the progress with the following command: docker logs -f log4j...

CVE-2017-9606

CVE-2017-9606 Due to insufficient of checking integrity, authenticity and low user rights on update folder local user can craft fake ViPNet update files with arbitrary execution code and place them in ViPNet update folder. After placing fake update files in ViPNet update folder, ViPNet update...

CVE-2022-46395

Exploit for CVE-2022-46395 The write up can be found here. This is a bug in the Arm Mali kernel driver that I reported in November 2022. The bug can be used to gain arbitrary kernel code execution from the untrusted app domain, which is then used to disable SELinux and gain root. The exploit is...

html/template: golang: html/template: Cross-site scripting via improper escaping of yield keyword

A flaw was found in Go's html/template component. This vulnerability allows cross-site scripting XSS due to improper escaping of the 'yield' keyword during template processing. A remote attacker could exploit this flaw by providing crafted input to an affected template, leading to arbitrary scrip...

cmd/go: golang: cmd/go: arbitrary code execution via untrusted module proxy

A flaw was found in the Go toolchain cmd/go. When a user works inside a malicious Go project that defines a bogus golang.org/fips140 module and connects to an untrusted Go module proxy GOMODPROXY, the proxy can serve an arbitrary replacement module that still passes local verification. This can...

CVE-2026-57189 Asterisk: Possible RED T.140 Generation Accumulation OOB Write

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED out-of-bounds write during generation accumulation using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to...

EUVD-2026-111221

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED out-of-bounds write during generation accumulation using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to...

CVE-2026-57189 Asterisk: Possible RED T.140 Generation Accumulation OOB Write

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED out-of-bounds write during generation accumulation using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to...

CVE-2026-57189 Asterisk: Possible RED T.140 Generation Accumulation OOB Write

Asterisk is an open source private branch exchange and telephony toolkit. In affected deployments, an authenticated attacker may cause a T.140 RED out-of-bounds write during generation accumulation using carefully crafted packets, potentially allowing remote code execution or causing Asterisk to...

CVE-2026-57189

The Asterisk telephony toolkit is vulnerable to an out-of-bounds write during generation accumulation caused by T.140 RED packets. An authenticated attacker can exploit this using carefully crafted packets to potentially achieve remote code execution or cause a system crash. This vulnerability sp...

CVE-2023-4220

RCE for Chamilo LMS CVE-2023-4220 Using a Web Shell This project automates the exploitation of the remote code execution vulnerability CVE-2023-4220 found in Chamilo LMS. Using a web shell, the tool facilitates the automated exploitation of the vulnerability to gain control over affected Chamilo...

manticore

⚠️ Project is archived ⚠️ This project is no longer internally developed and maintained. Manticore Manticore is a symbolic execution tool for the analysis of smart contracts and binaries. Features Program Exploration : Manticore can execute a program with symbolic inputs and explore all the...

sinter

Sinter Sinter is a 100% user-mode endpoint security agent for macOS 10.15 and above, written in Swift. Sinter uses the user-mode EndpointSecurity API to subscribe to and receive authorization callbacks from the macOS kernel, for a set of security-relevant event types. The current version of Sinte...

CVE-2026-114595 Integer overflow or wraparound in EPICS Base

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution...

EUVD-2026-111108

In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution...