sshole

CVE-2026-123158 PoC Proof of Concept PoC exploit for CVE-...

jeecg-tiplus

jeecgboot-tiplus vulnerability detection by dollmarker v1.0 J...

Exploit for Use After Free in Linux Linux_Kernel

No d...

Exploit for CVE-2026-123158

Alpine Linux OpenSSH Password Authentication Bypass CVE-2026-...

Exploit for CVE-2026-116214

CVE-2026-116214 1. CVE metadata | Field | Value | |---|--...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109619 — PHP Session Upload Progress UAF → RCE A GDB...

Exploit for Deserialization of Untrusted Data in Openidentityplatform Openam

CVE-2026-33439 — Remote Code Execution in OpenAM An unauthen...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2Shell Guard Scanner kerentanan PHP2Shell — CVE-20...

Exploit for CVE-2026-122158

CVE-2026-122158 — InvoiceShelf cross-tenant privilege escalati...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Packagekit_Project Packagekit

pk2root — CVE-2026-41651 Independent C implementation of the...

HONOR AMG-AN00 Android 16 Kernel 6.1.157 Privilege Escalation

HONOR AMG-AN00 Android 16 kernel version 6.1.157 contains a POSIX CPU timer use-after-free vulnerability. The supplied proof of concept triggers the flaw to obtain a temporary uid 0 shell. https://packetstorm.news/download/239799...

OPNsense os-acme-client 4.17 Command Injection

OPNsense os-acme-client version 4.17 contains an authenticated OS command injection in Google Cloud DNS validation, allowing WebGUI/API users with certificate issuance or renewal privileges to execute commands as root. A proof of concept is included. https://packetstorm.news/download/239793...

OpenSSH 10.6p1 Password Authentication Bypass

OpenSSH version 10.6p1 contains a password authentication bypass when built with musl libc and PAM disabled. Affected configurations with password authentication enabled can accept logins to accounts with a password field under stated conditions. https://packetstorm.news/download/239810...

Wing FTP Server 8.2.5 Cross Site Scripting

Wing FTP Server versions before 8.2.6 contain a stored cross site scripting vulnerability allowing authenticated web-client users to forge a connection ID through the nowpath parameter in webclient/makethumb.html. The legacy administrator Activity page renders it without HTML escaping...

Dell Wyse Management Suite Unauthenticated Remote Code Execution

Dell Wyse Management Suite versions prior to 5.5 contain missing authorization and unrestricted dangerous file upload vulnerabilities. This proof of concept chains the issues to create a Global Administrator account and optionally upload a JSP web shell for remote code execution...

Google Android 17 MediaImageDecoder Heap Buffer Overflow

Google Android versions 14 through 17 contain a heap buffer overflow in MediaImageDecoder onOutputReceived. The proof of concept HEIF grid image triggers an out-of-bounds write during media metadata decoding. https://packetstorm.news/download/239817...

InvoiceShelf 3.0.0-alpha.3 Cross-Tenant Privilege Escalation

InvoiceShelf versions 2.4.0 through 2.4.3 and 3.0.0-alpha.0 through 3.0.0-alpha.3 contain an authorization flaw that lets an owner of one company create or move a member into another company with an attacker-selected role. A proof of concept is included. https://packetstorm.news/download/239815...

Drupal Fasttoggle 4.1.0 Access Bypass

Drupal Fasttoggle versions before 4.1.1 contain an incorrect authorization vulnerability that lets a user with the use fasttoggle permission toggle arbitrary node publication, promotion, and stickiness states, as well as comment publication. https://packetstorm.news/download/239805...

Telerik UI for ASP.NET AJAX 2026.1.225 RadFilter Deserialization Remote Code Execution

Telerik UI for ASP.NET AJAX versions 2024.4.1114 through 2026.1.225 contain an insecure deserialization issue in RadFilter state restoration. When state is exposed in a cookie, tampering can lead to server-side remote code execution. This proof of concept demonstrates the issue...

Arm Mali GPU Kernel Driver r39p0 Use-After-Free

Arm Mali GPU Kernel Driver versions through r39p0 contain a use-after-free vulnerability. This proof of concept targets the Honor Pad 7 AGM3-W09HN with Mali Bifrost r20p0-01rel0 and Android 10 to obtain a temporary root shell. https://packetstorm.news/download/239795...