278017 matches found
...[ More ]
Barrier version 2.4.0 for Windows contains a local privilege escalation vulnerability in the IPC command interface exposed by the barrierd.exe service on 127.0.0.1:24801. The IPC server accepts local TCP clients and processes a command line together with a one-byte elevation flag without...
CHIRP chirp-next-20260814 Arbitrary Code Execution
CHIRP's Kenwood ITM file format driver passes raw CSV field values from an opened file directly to Python's built-in eval with no validation. An attacker who delivers a crafted file to a CHIRP user achieves arbitrary code execution as the victim user. CHIRP — Arbitrary Code Execution via eval in...
Chronicle Wire 2026.8 Class Instantiation
Chronicle Wire permits YAML type tags supplied within serialized input to influence Java class selection and object instantiation during untyped deserialization. Chronicle Wire permits YAML type tags supplied within serialized input to influence Java class selection and object instantiation durin...
Escargot 4.3.0-214-gfaee4437 Buffer Overflow
Escargot contains a remotely triggerable one-byte stack-based out-of-bounds write in the WebSocket message handling logic used by the debugger. Escargot contains a remotely triggerable one-byte stack-based out-of-bounds write in the WebSocket message handling logic used by the debugger. When...
...[ More ]
An unauthenticated remote debugger vulnerability exists in Escargot version 4.3.0-214-gfaee4437 when the application is compiled with ESCARGOTDEBUGGER support and the debug server is enabled using --start-debug-server. The debugger accepts client connections without authentication or authorizatio...
Exploit for CVE-2026-75898
CVE-2026-75898 — RAGFlow Invoke component SSRF Server-Side Re...
Exploit for Improper Input Validation in Microsoft
CVE-2023-23397 — Purple Team: Exploit + Detection Two halves...
TCGuard
TCGuard — Universal Crash, Exploit, Packet & Anti-Bot Protecti...
Pentest-Swarm-AI
The first open-source pentesting tool built on a real swarm — no...
Exploit for Improper Access Control in Oracle Application_Performance_Management
No d...
CodeAlpha_Secure_Cloud_Registration
No d...
cybersecurity-network-security-lab
cybersecurity-network-security-lab Demonstrates two...
jQuery-Checker-Multiple-XSS-Vulnerabilities
jQuery CVE-2020-11022 · CVE-2020-11023 — checker scanner...
Exploit for Use After Free in Google Android
CVE-2019-2215 Temproot for Pixel 2 and Pixel 2 XL via CVE-...
Exploit for SQL Injection in Metabase
CVE-2026-72898 — Metabase unauthenticated SQL injection detec...
Exploit for CVE-2026-18080
CVE-2026-18080 — ERP Complete HR, Accounting & CRM Suite putc...
Exploit for Improper Input Validation in Microsoft
CVE-2026-63520 Sharepoint unsafe type RCE + CVE-2026-55040 cha...
f_hid-4.14-backports
fhid backports for Linux 4.14.190 SM-A525F Three fixes to...