278513 matches found
CVE-2026-KGSL-UAF
CVE-2026-XXXXX ā KGSL Syncsource Fence Use-After-Free Sever...
windows7-eternalblue-exploit-lab
EternalBlue MS17-010 Exploitation Lab ā Windows 7 A hands-o...
lynx
LYNX ā Layered Network eXploit Suite LYNX is a CLI-driven pla...
Exploit for CVE-2026-4020
cve-id ā” Simple Usage Use this project only in safe and...
ctf-writeups
CTF Writeups Personal CTF challenge writeups covering web exp...
Exploit for Improper Access Control in Widgetfactorylimited Jce
No d...
š PHP 8.5.7 mb_substr() Underflow
PHP version 8.5.7 suffers an underflow condition that can be exploited to trigger a denial of service condition. PHP 8.5.7 mbsubstr 'SJIS-mac' sizet underflow Author: Khashayar Fereidani Disclosure Date: 2026-06-18 Advisory: https://fereidani.com/php-857-mbsubstr-sjis-mac-sizet-underflow Contact:...
š OpenBSD mpls_do_error Stack Disclosure
OpenBSD suffers from an mplsdoerror remote kernel stack disclosure vulnerability via an MPLS label stack. ------------------------------------------------------------------------ OpenBSD mplsdoerror: Remote Kernel Stack Disclosure via MPLS Label Stack Over-read...
š Sprecher Automation SPRECON-E-C/-E-P/-E-T3 Missing Secure-Boot / Static Passwords
Sprecher Automation SPRECON-E-C/-E-P/-E-T3 leaks the firmware signing private key, is missing a secure-boot mechanism, has unencrypted flash memory, use of static passwords, and hard-coded vendor accounts. SEC Consult Vulnerability Lab Security Advisory...
š PHP 8.5.7 levenshtein() Signed-Integer Overflow
The levenshtein function calculates the Levenshtein distance between two strings, optionally accepting custom costs for insertion, replacement, and deletion operations. In PHP version 8.5.7, the implementation lacks proper bounds checking for these cost parameters. PHP 8.5.7 levenshtein...
š PHP 8.5.7 FILTER_SANITIZE_ENCODED Uninitialized Read
PHP version 8.5.7 suffers from an uninitialized read issue that does not appear immediately useful for any sort of exploitation. PHP 8.5.7 FILTERSANITIZEENCODED uninitialized read Author: Khashayar Fereidani Disclosure Date: 2026-06-18 Advisory:...
š Worksnaps.net Worksnaps Hardcoded Root Cloud Credentials
Silver Leaf Technologies - Worksnaps.net Worksnaps suffers from a hardcoded credential vulnerability. Several application binaries contained hardcoded credentials, such as AWS access keys and S3 bucket names, which granted access to the production environment. Those hardcoded AWS cloud credential...
š OpenBSD sppp_pap_input PAP Authentication Bypass
OpenBSD suffers from a PAP authentication bypass vulnerability via a zero-length bcmp. All versions through 7.6 are affected. ------------------------------------------------------------------------ OpenBSD sppppapinput: PAP Authentication Bypass via Zero-Length bcmp...
š PHP 8.5.7 dom_xml_serialization_algorithm() Stack Overflow
PHP version 8.5.7 suffers from a stack overflow vulnerability due to unbounded recursion in domxmlserializationalgorithm and domxmlserializeelementnode. PHP 8.5.7 domxmlserializationalgorithm stack-overflow Author: Khashayar Fereidani Disclosure Date: 2026-06-18 Advisory:...
š N-able Mail Assure Authentication Bypass
N-able Mail Assure appears to suffer from a cross-tenant authentication bypass vulnerability via spoofing. CVE-2025-68624: Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure CVE ID: CVE-2025-68624 Status: DISPUTED CWE: CWE-290 Authentication Bypass by Spoofing Affected Product:...
Exploit for CVE-2026-47729
š¦ CVE-2026-47729 - Squidbleed ā ļø Heartbleed's...
Exploit for Improper Control of Dynamically-Managed Code Resources in N8N
No d...
fragnesia-python-exploit
Fragnesia CVE-2026-46300 - Python Exploit !Python 3.8+h...