278483 matches found
📄 Samsung Galaxy Zero-Click HFP/A2DP Takeover
Samsung Galaxy buds have an issue where an attacker within Bluetooth range can force a transition of the active audio session to an attacker-controlled device without requiring user interaction. Samsung believes it is a non-issue. MESSAGE HASH SHA-256:...
📄 ImageMagick 7.x MIFF BZip Decoder Infinite Loop Denial of Service
A vulnerability in ImageMagick's MIFF decoder coders/miff.c allows an attacker to cause an infinite loop and CPU exhaustion by providing a specially crafted MIFF file with a compressed block length of zero when BZip compression is enabled...
📄 Zscaler Client Connector macOS Fail-Open SIGSTOP Bypass
Zscaler Client Connector for macOS can be bypassed by a standard local user during the Restart Services / Repair App workflow by suspending user-owned Zscaler processes with SIGSTOP. The reported impact is fail-open loss of ZIA/ZPA enforcement, DLP, telemetry, and tunnel routing while the console...
📄 Whistlelink Site-Access Password Exposed
The Whistlelink reporting portal protects optionally-enabled, password-gated whistleblowing sites with a site-access password. When a visitor unlocks such a site, the client validates the password by issuing an HTTP GET request that carries the password as a URL query-string parameter which is...
📄 Cacti 1.2.30 Remote Code Execution
Cacti versions 1.2.30 and below authenticated remote code execution exploit that uses variable injection via graph rendering. Written in Python. ================================================================================================================================== | Title : Cacti ≤...
Exploit for CVE-2026-56782
CVE-2026-56782...
self-signed-cert-poc-python
A short python proof of concept...
inflateghost
InflateGhost — CVE-2026-40711 Critical heap overflow in zli...
vulconcern
vulconcern vulconcern is a local, read-only auditor for tam...
Exploit for CVE-2026-13768
CVE-2026-13768: Privileged IoT Hub Credential — Fleet Enumerat...
Exploit for Unrestricted Upload of File with Dangerous Type in Devcode Openstamanager
CVE-2026-38751 – OpenSTAManager Arbitrary File Upload PoC T...
Exploit for SQL Injection in Sangoma Freepbx
CVE-2025-57819 - FreePBX Unauthenticated Remote Code Execution...
Exploit for Improper Verification of Cryptographic Signature in Simple-Help Simplehelp
CVE-2026-48558: SimpleHelp OIDC Authentication Bypass !WAR...
skillfy-poc
Skillfy Feature 3 POC — Multilingual AI Dubbing Proof-of-conc...
poc-lab
Recent CVE PoC & reproduction scripts. Focused on high-severity vulnerabilities across Linux kernel, Windows, macOS and more...
exploitarium
A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free to report them yourself and take credit for the CVE if handed out lulz. Please do not abuse these. I do this so to allure people into the field, and I've alway...
vuln-research-mcp
Vulnerability Research MCP Server A vulnerability research MC...