278144 matches found
LightFTP Server 2.3.1 Race Condition
Summary Small x86-32/x64 FTP Server. Description LightFTP 2.3.1 contains a residual race condition an incomplete fix for CVE-2024-11144 in the workerthreadcleanup function of ftpserv.c. The control thread reads and acts on shared per-connection state, including the worker thread id it then passes...
📄 AnyDesk 9.0.4 Denial of Service
AnyDesk version 9.0.4 contains a local privilege-lacking vulnerability in its "Send Support Information" feature. An attacker with low-privileged local access can abuse NTFS junctions reparse points to redirect file write operations performed by the AnyDesk service. The service blindly follows th...
📄 Flowise 3.1.2 Authenticated Remote Code Execution
A proof of concept exploit for an authenticated remote code execution vulnerability in Flowise version 3.1.2. The vulnerability allegedly exists because several record-manager and agent-memory components parse user-controlled additionalConfig JSON and pass its properties directly to a TypeORM...
Exploit for Improper Input Validation in Google Chrome
--- CVE-2026-11105 – Stack Buffer Overflow in Custom Base64...
Exploit for Use of Uninitialized Variable in Google Chrome
--- CVE-2026-11104 – Python SSTI via Jinja2 |attr Filter B...
Exploit for Improper Privilege Management in Google Chrome
--- 3. CVE-2026-11103 – GraphQL Batching Alias Rate Limit By...
Exploit for Use of Function with Inconsistent Implementations in Google Chrome
--- CVE-2026-11102 – OAuth2 Implicit Grant Fragment Hijackin...
Exploit for Use of Uninitialized Variable in Google Chrome
CVE-2026-11101 – HTTP Cache Poisoning via Unkeyed Query Parame...
ctf-writeups
🏴 CTF Writeups & PoC Collection Documented solutions from Hac...
Exploit for CVE-2026-18718
CVE-2026-18718 Arbitrary code execution in Ghi...
Exploit for CVE-2026-69083
CVE-2026-69083 — SiYuan Unauthenticated SQL Injection Unauthe...
Exploit for CVE-2026-56158
CVE-2026-56158 — .NET Framework Remote Code Execution RCE Po...
Exploit for CVE-2026-68771
CVE-2026-68771 — ComfyUI Unauthenticated Pickle Deserializatio...
wp2shell
Command-Line Arguments Argument Type Default Description -u, --u...
wazuh-iis-defense
Guia de Configuração — Monitoramento IIS com Wazuh + Sysmon...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
CVE-2026-42826 — Azure DevOps Information Disclosure PoC O...
Exploit for Code Injection in Vmware Spring_Framework
PoC Spring4Shell CVE-2022-22965 Proof of Concept per lo sfr...
Exploit for CVE-2026-32621
CVE-2026-32621 - Apollo Federation Prototype Pollution PoC...