Exploit for CVE-2026-120232

中文 | EN !CVE-2026-120232 Logo./...

Exploit for CVE-2026-107441

zyxel-gs1900-scanner Local triage for CVE-2026-107441, th...

Exploit for CVE-2026-98260

CVE-2026-98260-GT7Pro-RMX5010 Temporary root for realme GT7 P...

Ingram-Extended

Simplified Chinese | Englishhttps://github.com/jorhelp/Ingram...

Exploit for CVE-2026-98260

CVE-2026-98260-Xiaomi-17-Pro-Max Xiaomi 17 Pro Max popsicle...

fastjson-rce-jargen

fastjson-rce-jargen A pure Python implementation of a malic...

Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware

Hikvision CCTV — CVE-2017-7921 Proof of Concept Authorized...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618-CVE-2026-109619-POC PHP2Shell — PHP Core M...

Exploit for CVE-2026-111943

CVE-2026-111943-Emudhra-Ca-Compromise-POC eMudhra/emSign I...

Boa 0.94.14rc21 HTTP Server Log Forgery

Boa HTTP Server version 0.94.14rc21 logs unsanitized terminal-control characters. The proof of concept sends a crafted HTTP request to inject a misleading log entry. ===================================================================================================================================...

Samsung Xclipse GPU Driver Android 16 File Reference Count Underflow

Samsung Xclipse GPU driver on Android 16 contains a gang-submit logic inversion that can underflow a file reference count, resulting in a file-level use-after-free condition. Samsung sgpu: File-level Reference Count Underflow via Gang Submit Logic Inversion in amdgpujobfreecb...

Samsung One UI 8.5 HEIF Tonemap Arbitrary Read

Samsung One UI version 8.5 contains an arbitrary read vulnerability in its custom HEIF decoder's tonemap metadata parser. Proof of concept HEIC files trigger an out-of-bounds or absolute-address read during Gallery thumbnail generation. https://packetstorm.news/download/239639...

realme GT7 Pro RMX5010 16.0.10.500 Temporary Root

realme GT7 Pro RMX5010 version 16.0.10.500 contains a POSIX CPU timer use-after-free vulnerability. The proof of concept obtains temporary root access on a locked-bootloader device. https://packetstorm.news/download/239621...

libtar 1.2.20 GNU Long Name Out-Of-Bounds Read

libtar version 1.2.20 contains an incomplete fix for GNU long-name and long-link handling that can result in an out-of-bounds read. A proof of concept crafts a tar archive that demonstrates the issue. https://packetstorm.news/download/239635...

WordPress W3 Total Cache 2.10.7 Cross Site Scripting

WordPress W3 Total Cache plugin versions through 2.10.7 contain an unauthenticated stored cross site scripting vulnerability involving predictable HTML-minify ignored-comment placeholder tokens in comment content. https://packetstorm.news/download/239634...

Edimax BR-6208AC 1.32 Command Injection

Edimax BR-6208AC version 1.32 contains a command injection vulnerability in /goform/mp. The proof of concept sends crafted POST requests and retrieves command output. https://packetstorm.news/download/239616...

libwebsockets 4.5.8 MQTT PUBACK Out-Of-Bounds Write

libwebsockets version 4.5.8 and earlier MQTT client implementations contain an out-of-bounds write in PUBACK packet handling. The proof of concept provides a containerized malicious MQTT broker and vulnerable client harness demonstrating controlled corruption...

Elasticsearch 9.5.5 Remote Cluster Server Unauthenticated Denial of Service

Elasticsearch versions 8.10.0 through 8.19.23, 9.0.0 through 9.4.8, and 9.5.0 through 9.5.5 contain an uncontrolled recursion vulnerability in the remote cluster server interface. An unauthenticated crafted request can terminate an affected node. https://packetstorm.news/download/239614...

Node.js 26.12.0 Brotli Decoder Out-Of-Bounds Write

Node.js versions 22.x, 24.x, and 26.x contain an out-of-bounds write in the bundled Brotli decoder. A malformed Brotli stream can be treated as requiring further input rather than a format error, allowing process memory corruption or denial of service when an application decompresses...

CyberPanel 2.4.7 PHP Selection Command Injection

CyberPanel version 2.4.7 and earlier contains an authenticated command injection vulnerability in the phpSelection parameter of the changePHP controller. The proof of concept demonstrates root command execution through the cloud API. https://packetstorm.news/download/239637...