278102 matches found
📄 DCMTK 3.7.0 DICOMDIR Icon Integer Overflow
DCMTK DICOM ToolKit version 3.7.0 has an integer overflow in the PGM image size calculation that results in an undersized heap allocation. The subsequently unchecked conversion of the image dimensions from unsigned int to Uint16 causes the image scaler to process a much larger image than was...
📄 Ghost CMS 6.19.0 Remote Code Execution
This Metasploit module exploits a remote code execution vulnerability in Ghost CMS. Specifically crafted malicious themes can execute arbitrary code on the server running Ghost. The affected versions include all releases from 0.7.2 up to and including 6.19.0. For versions 5.105.0-5.130.5 and...
📄 LightFTP Server 2.4 Race Condition
LightFTP versions through 2.4 current master, commit d28c5e0 contain multiple data race conditions in ftpserv.c caused by unsynchronized access to the shared FTPCONTEXT between a connection's control thread and its data-transfer worker thread. !/usr/bin/env python3 LightFTP Server 2.4 Race...
📄 DCMTK 3.7.0 Path Traversal
dcmsend in DCMTK DICOM ToolKit version 3.7.0 is vulnerable to path traversal when it is instructed to read input files from a specially crafted DICOMDIR. This can lead to unauthorized disclosure of readable DICOM objects, including protected health information. Advisory ID: SYSS-2026-047 Product:...
📄 DCMTK 3.7.0 RLE Encoder Heap Out-of-Bounds Read
A proof of concept for a heap out-of-bounds read vulnerability in DCMTK version 3.7.0. The vulnerability is caused by an integer overflow in the RLE encoder's expected-size sanity check. By supplying crafted image dimensions that cause the 32-bit size calculation to wrap around, an attacker can...
📄 WordPress WP2Shell SQL Injection / Remote Code Execution
This Metasploit module chains two WordPress core vulnerabilities, together known as WP2Shell, to gain unauthenticated remote code execution against default installs of WordPress 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1. The vulnerabilities are fixed in WordPress 6.9.5 and 7.0.2. CVE-2026-60137...
📄 Cisco CUCM 15.x Remote Code Execution
A pre-authentication remote code execution chain in Cisco CUCM 15.x allows an unauthenticated network attacker to achieve root-level access in three HTTP requests. Advisory Information - Advisory IDs: SKYLINE-2026-001, SKYLINE-2026-002, SKYLINE-2026-003 - Title: Pre-Authentication Remote Root via...
📄 DCMTK 3.7.0 Unbounded Value Multiplicity Allocation
A proof of concept for an unbounded value multiplicity allocation vulnerability in DCMTK version 3.7.0. The vulnerability occurs when textual DICOM values are parsed into typed numeric arrays without validating the computed Value Multiplicity. An attacker can supply a crafted textual DICOM dump o...
📄 DCMTK 3.7.0 XML Binary File Heap Buffer Overflow
In DCMTK DICOM ToolKit version 3.7.0, the xml2dcm application and the DcmXMLReader library are vulnerable to a heap buffer overflow when importing external binary files larger than 4 GiB via the binary="file" XML attribute. The file size is measured as sizet but narrowed to Uint32 for the heap...
LightFTP Server 2.4 Race Condition
Summary Small x86-32/x64 FTP Server. Description LightFTP through version 2.4 current master, commit d28c5e0 contains multiple data races in ftpserv.c caused by unsynchronized access to the shared FTPCONTEXT between a connection's control thread and its data-transfer worker thread. In...
Exploit for Signal Handler Race Condition in Sonicwall Sma_6200_Firmware
C...
phymem-exploit
phymem-exploit Proof-of-concept exploit for Supermicro's phym...
Exploit for SQL Injection in Php
CVE-2026-17543 — SQL Injection in PHP ext/pgsql via E'...'...
ResetNightmare-Python
ResetNightmare PoC CVE-2026-27912 Python/impacket re-implem...
Zapscape
The KVM Escape Trilogy ITScape CVE202646...
WebExploitation-Notes
BookSheetCTF - Web Security CheatSheet & Concept Guide Selama...
Exploit for CVE-2026-70553
CVE-2026-70553 - MaxSite CMS Unauthenticated RCE !CVEhttp...
winxp-stack-buffer-overflow
Stack Buffer Overflow & Local Privilege Escalation Project...