2081 matches found
CVE-2025-52357
Cross-Site Scripting XSS vulnerability exists in the ping diagnostic feature of FiberHome FD602GW-DX-R410 router firmware V2.2.14, allowing an authenticated attacker to execute arbitrary JavaScript code in the context of the router s web interface. The vulnerability is triggered via user-supplied...
PT-2025-29843 · Gnu +1 · Gpac +1
Уязвимость функции gf filter pid inst swap утилиты MP4Box мультимедийной платформы GPAC связана с использованием памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить произвольный код...
Exploit for CVE-2025-49132
CVE-2025-49132-poc I made this poc for CVE-2025-49132https...
Microsoft Defender for Endpoint (MDE) - Elevation of Privilege
!/bin/bash Exploit Title: Microsoft Defender for Endpoint MDE - Elevation of Privilege Date: 2025-05-27 Exploit Author: Rich Mirch Vendor Homepage: https://learn.microsoft.com/en-us/defender-endpoint/ Software Link:...
📄 WordPress Social Welfare 3.5.2 Remote Code Execution
WordPress Social Welfare plugin versions 3.5.2 and below suffer from a remote code execution vulnerability. !/usr/bin/env python3 Exploit Title: Social Warfare WordPress Plugin 3.5.2 - Remote Code Execution RCE Date: 25-06-2025 Exploit Author: Huseyin Mardini @housma Original Researcher: Luka Sik...
Exploit for CVE-2025-5640
PX4 Military UAV Autopilot =1.12.3 Stack Buffer Overflow Expl...
PT-2025-28194 · Gnu +1 · Gpac +1
Уязвимость функции gf dash group get audio channels media tools/dash client.c утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием указателей при обработке DASH-манифестов. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код или вызвать отказ в обслужива...
Exploit for CVE-2025-5964
CVE‑2025‑5964 Path Traversal PoC for M‑Files Author: By...
Microsoft Excel Use After Free - Local Code Execution
Titles: Microsoft Excel Use After Free - Local Code Execution Author: nu11secur1ty Date: 06/09/2025 Vendor: Microsoft Software: https://www.microsoft.com/en/microsoft-365/excel?market=af Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27751 Versions: MS Excel 2016, MS Office...
Google Chrome Security Update (stable-channel-update-for-desktop_10-2025-06) - Mac OS X
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
TightVNC 2.8.83 - Control Pipe Manipulation
Exploit Title: TightVNC 2.8.83 - Control Pipe Manipulation Date: 06/09/2025 Exploit Author: Ionut Zevedei [email protected] Exploit Repository: https://github.com/zeved/CVE-2024-42049-PoC Vendor Homepage: https://www.tightvnc.com/ Software Link: https://www.tightvnc.com/download.php Version: 2.8.83...
Exploit for CVE-2025-29927
CVE-2025-29927 - Critical Security Vulnerability in Next.js...
Exploit for Use After Free in Microsoft
KTMPOCS This repo contains reports for CVE 2024-43570http...
Exploit for CVE-2025-49113
CVE-2025-49113 RCE exploit the method for use...
Exploit for Unrestricted Upload of File with Dangerous Type in Tecrail Responsive_Filemanager
CVE 2022 46604 – Responsive File Manager ⚠️ Disclaimer...
Grandstream GSD3710 1.0.11.13 - Stack Overflow
!/usr/bin/env python3 Exploit Title: Grandstream GSD3710 1.0.11.13 - Stack Overflow Date: 2025-05-29 Exploit Author: Pepelux Vendor Homepage: https://www.grandstream.com/ Version: Grandstream GSD3710 - firmware:1.0.11.13 and lower Tested on: Linux and MacOS CVE: CVE-2022-2025 """ Author: Jose Lui...
Automic Agent 24.3.0 HF4 - Privilege Escalation
Exploit Title: Automic Agent 24.3.0 HF4 - Privilege Escalation Date: 26.05.2025 Exploit Author: Flora Schäfer Vendor Homepage: https://www.broadcom.com/products/software/automation/automic-automation Version: /tmp/sh.so 2. Run the ucxjlx6 executable as follows $ ./ucxjlx6 ini=echo -e...
D-Link DIR-600L formSetWanL2TP function buffer overflow vulnerability
The D-Link DIR-600L is an entry-level wireless router from China's AUO D-Link that supports 150Mbps wireless transmission and four 100 megabit wired ports. The D-Link DIR-600L suffers from a buffer overflow vulnerability that stems from the formSetWanL2TP function parameter host failing to proper...
Kentico Xperience 13.0.178 - Cross Site Scripting (XSS)
Exploit Title: Kentico Xperience 13.0.178 - Cross Site Scripting XSS Date: 2025-05-09 Version: Kentico Xperience before 13.0.178 Exploit Author: Alex Messham Contact: [email protected] Source: https://github.com/xirtam2669/Kentico-Xperience-before-13.0.178---XSS-POC/ CVE: CVE-2025-32370 import...