278132 matches found
Exploit for Improper Locking in Linux Linux_Kernel
Linux Kernel Vulnerability Analysis: CVE-2021-26708 Overvi...
pocyeah
An open-source project from Pillar Security PocYeah Turn...
Exploit for Cross-Site Request Forgery (CSRF) in Apache Zeppelin
CVE-2026-44613 Donate Support the maintenance of this pro...
langgraph-agentic-research-api-poc
LANGGRAPH-AGENTIC-RESEARCH-API-POC - High-Impact Autonomous Ag...
Exploit for CVE-2026-70559
CVE-2026-70559...
kev-yardstick-audit
How late is the yardstick? Auditing the CISA KEV catalog as gr...
heap-pwn-tutorial
Heap Pwn CTF Training Tutorial 3h, beginner A self-containe...
ai-security-skill-scanner
AI Security Skill Scanner A meta-tool for performing securit...
Exploit for CVE-2026-64561
CVE-2026-64561 Donate Support the maintenance of this pro...
📄 DCMTK 3.7.0 DICOMDIR Icon Integer Overflow
DCMTK DICOM ToolKit version 3.7.0 has an integer overflow in the PGM image size calculation that results in an undersized heap allocation. The subsequently unchecked conversion of the image dimensions from unsigned int to Uint16 causes the image scaler to process a much larger image than was...
📄 Ghost CMS 6.19.0 Remote Code Execution
This Metasploit module exploits a remote code execution vulnerability in Ghost CMS. Specifically crafted malicious themes can execute arbitrary code on the server running Ghost. The affected versions include all releases from 0.7.2 up to and including 6.19.0. For versions 5.105.0-5.130.5 and...
📄 LightFTP Server 2.4 Race Condition
LightFTP versions through 2.4 current master, commit d28c5e0 contain multiple data race conditions in ftpserv.c caused by unsynchronized access to the shared FTPCONTEXT between a connection's control thread and its data-transfer worker thread. !/usr/bin/env python3 LightFTP Server 2.4 Race...
📄 DCMTK 3.7.0 Path Traversal
dcmsend in DCMTK DICOM ToolKit version 3.7.0 is vulnerable to path traversal when it is instructed to read input files from a specially crafted DICOMDIR. This can lead to unauthorized disclosure of readable DICOM objects, including protected health information. Advisory ID: SYSS-2026-047 Product:...
📄 DCMTK 3.7.0 RLE Encoder Heap Out-of-Bounds Read
A proof of concept for a heap out-of-bounds read vulnerability in DCMTK version 3.7.0. The vulnerability is caused by an integer overflow in the RLE encoder's expected-size sanity check. By supplying crafted image dimensions that cause the 32-bit size calculation to wrap around, an attacker can...
📄 WordPress WP2Shell SQL Injection / Remote Code Execution
This Metasploit module chains two WordPress core vulnerabilities, together known as WP2Shell, to gain unauthenticated remote code execution against default installs of WordPress 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1. The vulnerabilities are fixed in WordPress 6.9.5 and 7.0.2. CVE-2026-60137...
LightFTP Server 2.4 Race Condition
Summary Small x86-32/x64 FTP Server. Description LightFTP through version 2.4 current master, commit d28c5e0 contains multiple data races in ftpserv.c caused by unsynchronized access to the shared FTPCONTEXT between a connection's control thread and its data-transfer worker thread. In...
📄 DCMTK 3.7.0 XML Binary File Heap Buffer Overflow
In DCMTK DICOM ToolKit version 3.7.0, the xml2dcm application and the DcmXMLReader library are vulnerable to a heap buffer overflow when importing external binary files larger than 4 GiB via the binary="file" XML attribute. The file size is measured as sizet but narrowed to Uint32 for the heap...
📄 Cisco CUCM 15.x Remote Code Execution
A pre-authentication remote code execution chain in Cisco CUCM 15.x allows an unauthenticated network attacker to achieve root-level access in three HTTP requests. Advisory Information - Advisory IDs: SKYLINE-2026-001, SKYLINE-2026-002, SKYLINE-2026-003 - Title: Pre-Authentication Remote Root via...
📄 DCMTK 3.7.0 Unbounded Value Multiplicity Allocation
A proof of concept for an unbounded value multiplicity allocation vulnerability in DCMTK version 3.7.0. The vulnerability occurs when textual DICOM values are parsed into typed numeric arrays without validating the computed Value Multiplicity. An attacker can supply a crafted textual DICOM dump o...