292897 matches found
Drupal Fasttoggle 4.1.0 Access Bypass
Drupal Fasttoggle versions before 4.1.1 contain an incorrect authorization vulnerability that lets a user with the use fasttoggle permission toggle arbitrary node publication, promotion, and stickiness states, as well as comment publication. https://packetstorm.news/download/239805...
Google Android 17 MediaImageDecoder Heap Buffer Overflow
Google Android versions 14 through 17 contain a heap buffer overflow in MediaImageDecoder onOutputReceived. The proof of concept HEIF grid image triggers an out-of-bounds write during media metadata decoding. https://packetstorm.news/download/239817...
InvoiceShelf 3.0.0-alpha.3 Cross-Tenant Privilege Escalation
InvoiceShelf versions 2.4.0 through 2.4.3 and 3.0.0-alpha.0 through 3.0.0-alpha.3 contain an authorization flaw that lets an owner of one company create or move a member into another company with an attacker-selected role. A proof of concept is included. https://packetstorm.news/download/239815...
Telerik UI for ASP.NET AJAX 2026.1.225 RadFilter Deserialization Remote Code Execution
Telerik UI for ASP.NET AJAX versions 2024.4.1114 through 2026.1.225 contain an insecure deserialization issue in RadFilter state restoration. When state is exposed in a cookie, tampering can lead to server-side remote code execution. This proof of concept demonstrates the issue...
Drupal Fasttoggle 4.1.0 Cross Site Request Forgery
Drupal Fasttoggle versions before 4.1.1 contain a cross site request forgery vulnerability in the toggle URL that allows an attacker to change content publication status on behalf of a user with the Use Fasttoggle permission. https://packetstorm.news/download/239804...
AJ-Report 1.7.1 Authentication Bypass / Remote Code Execution
AJ-Report through version 1.7.1 uses a hard-coded JWT secret for share tokens, allowing unauthenticated attackers to access the testTransform endpoint and execute Groovy code. This proof of concept demonstrates the issue. https://packetstorm.news/download/239794...
Microsoft Windows CSC Service Local Privilege Escalation
Microsoft Windows CSC Service contains a local privilege escalation vulnerability. This proof of concept triggers a vulnerable CSC driver IOCTL to elevate the current Beacon Object File context to SYSTEM. https://packetstorm.news/download/239822...
OpenIdentityPlatform OpenAM 16.0.5 Pre-Authentication Remote Code Execution
OpenIdentityPlatform OpenAM versions 16.0.5 and earlier contain a pre-authentication remote code execution vulnerability through unsafe deserialization of the jato.clientSession HTTP parameter. This proof of concept generates and delivers the associated serialized Java payload...
MacCMS v10 2026.1000.4053 Account Takeover
MacCMS v10 versions before 2026.1000.4054 contain an authentication bypass in password recovery that permits an unauthenticated attacker to reset an arbitrary member password using a recovery code sent to the attacker. https://packetstorm.news/download/239808...
OpenVPN 2.7.8 Interactive Service Privilege Escalation
OpenVPN version 2.7.8 for Windows improperly filters user-defined environment variables passed by OpenVPNServiceInteractive to openvpn.exe. The proof of concept demonstrates a standard user submitting privileged route-deletion or WFP outbound-block requests through an OpenSSL provider...
Telerik UI for ASP.NET AJAX 2026.2.708 DialogHandler Shell Upload
Telerik UI for ASP.NET AJAX versions through 2026.2.708 contain insufficient integrity protection for RadEditor DialogHandler parameters, allowing an attacker with application encryption key material to alter upload paths and upload an ASPX shell for remote code execution...
Arm Mali GPU Kernel Driver r39p0 Use-After-Free
Arm Mali GPU Kernel Driver versions through r39p0 contain a use-after-free vulnerability. This proof of concept targets the Honor Pad 7 AGM3-W09HN with Mali Bifrost r20p0-01rel0 and Android 10 to obtain a temporary root shell. https://packetstorm.news/download/239795...
Exploit for CVE-2026-76142
CVE-2026-76142 — Genian NAC/ZTNA pre-auth internal IPC routing...
Exploit for CVE-2026-123158
CVE-2026-123158 — "SSHole" OpenSSH Password Authenticatio...
ctf-writeups
CTF Writeups — Cristhian Taipe Writeups from CTF competitions...
Exploiting-Vulnerable-Hosts
Exploiting Vulnerable Hosts Overview This project demonstr...
ps4rf
PS4RF — PlayStation 4 Research Framework PS4RF is an offline-...
Exploit for CVE-2026-58868
CVE-2026-58868: Android HEIF Grid Heap Buffer Overflow Ove...