292789 matches found
Hikvision IP Camera Authentication Bypass
A proof of concept demonstrates a Hikvision IP camera authentication bypass using a crafted auth parameter to access protected snapshots, user lists, and configuration endpoints. https://packetstorm.news/download/239895...
PackageKit 1.3.4 Transaction Flag TOCTOU Local Privilege Escalation
PackageKit versions 1.0.2 through 1.3.4 contain a transaction flag TOCTOU race condition that allows an unprivileged local user to install an arbitrary package as root. This proof of concept demonstrates local privilege escalation. https://packetstorm.news/download/239889...
OliveTin 3000.10.0 OS Command Injection
OliveTin version 3000.10.0 and earlier contains an OS command injection vulnerability through unsanitized password-typed action arguments. The proof of concept submits an injected password argument to a specified action and retrieves its execution output. https://packetstorm.news/download/239880...
OpenSSH 10.6p1 Password Authentication Bypass
OpenSSH versions through 10.6p1 built with musl libc and without PAM contain a password authentication bypass that can allow oversized passwords to authenticate password-disabled accounts. A proof of concept scanner and lab are provided. https://packetstorm.news/download/239894...
Check Point Quantum Gateway R81.20 Path Traversal
Check Point Quantum Gateway version R81.20 contains an unauthenticated information-disclosure path traversal vulnerability in the /clients/MyCRL POST handler when Remote Access VPN or Mobile Access is enabled. The proof of concept requests /etc/passwd and validates a root account record...
WordPress WP Libre Form 1.5.0.1 Shell Upload
WordPress WP Libre Form plugin versions through 1.5.0.1 do not validate files uploaded through form submissions, allowing unauthenticated attackers to upload and execute PHP files. https://packetstorm.news/download/239892...
Microsoft Windows Search Heap Overflow
Microsoft Windows Search contains a heap overflow in CPMExternalSearchResultIn that may allow local privilege escalation. The proof of concept sends malformed local search-pipe messages, corrupts CVIQuery objects, and loads a supplied DLL as the Windows Search service...
MySQL Connector/J 9.7.1 Remote Truststore Loading
Oracle MySQL Connector/J versions 9.7.0 through 9.7.1 load TLS truststores specified by a connection property from arbitrary URLs. This proof of concept serves an attacker-controlled truststore and TLS MySQL endpoint to demonstrate server impersonation despite sslMode=VERIFYCA...
FreeSWITCH 1.11.2 API Chat Protocol Command Injection
FreeSWITCH version 1.11.2 and earlier allow an inbound SIP MESSAGE to select the api chat protocol and execute FreeSWITCH API commands. The supplied proof of concept supports detection, Digest authentication, command execution, DNS output collection, and a Nuclei template...
pocgate
Installation · Quick Start · Demo · Commands · Configuration · C...
BitterJava
BitterJava BitterJava is a purpousely VULNERABLE applicati...
WPI_CS547_ExploitDB_Small
No d...
WPI_CS547_ExploitDB_Large
No d...
Exploit for CVE-2026-83844
CVE-2026-83844: Windows Paint remote code execution...
lg-tv-root-exploit
LG WebOS TV Root Exploit Full chain exploit for LG TV 50UT805...
Exploit for CVE-2026-123158
OpenSSH musl libc Lab Environment CVE-2026-123158 A self-co...
Exploit for CVE-2026-123488
CVE-2026-123488 — Craft CMS unauthenticated SQL injection Una...
php-exploit-2026
PHP Portal — aplicação PHP + exploit PHP2Shell Ambiente compl...