292901 matches found
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — Exploitable Lab CVE-2026-109618 · CVE-2026-1096...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
HTB Cohort Writeup Difficulty: Easy | OS: Linux | A...
Exploit for CVE-2026-92183
CVE-2026-92183: GIMP APNG tRNS Stack Buffer Overflow → RCE...
Exploit for Missing Authentication for Critical Function in Coreweave Marimo
HTB Cohort Writeup Difficulty: Easy | OS: Linux | A...
GIMP 3.2.2 APNG Stack Buffer Overflow
GIMP version 3.2.2 contains an APNG parser stack-based buffer overflow when handling an oversized tRNS chunk. A malicious APNG file can execute code in the context of the application. https://packetstorm.news/download/239445...
libtar 1.2.20 GNU Long Name Out-Of-Bounds Read
libtar version 1.2.20 and distribution builds with a partial CVE-2021-33643/CVE-2021-33644 fix contain a heap out-of-bounds read in GNU long-name and long-link handling. A proof of concept archive triggers the flaw. https://packetstorm.news/download/239452...
Mitel MiCollab 9.8 SP1 FP2 Authentication Bypass
Mitel MiCollab version 9.8 SP1 FP2 and earlier contains path traversal and local file read vulnerabilities. The included proof of concept chains them to request /etc/passwd without prior authentication. https://packetstorm.news/download/239454...
TeamCity 2026.1.1 Cross Site Scripting
JetBrains TeamCity versions before 2026.1.2 contain a stored cross site scripting vulnerability via unauthenticated agent registration. The supplied proof of concept demonstrates malicious agent OS-name data executing when an administrator views legacy agent details...
Sudo 1.9.17 Chroot Privilege Escalation
Sudo versions 1.9.14 through 1.9.17 contain a local privilege escalation vulnerability in the --chroot option. This proof of concept loads a user-controlled NSS module to obtain root privileges. https://packetstorm.news/download/239450...
unixODBC 2.3.14 Heap Memory Corruption
unixODBC version 2.3.14 and below contain multiple heap buffer overflow, underflow, and over-read vulnerabilities. Proof of concept code is provided to demonstrate the issues. unixODBC versions 2.3.14 and below contain multiple heap buffer overflows, underflows, and over-reads. Attackers who can...
Brotli 1.2.0 Decoder Heap Out-Of-Bounds Read/Write
Brotli version 1.2.0 and prior listed releases contain a heap out-of-bounds read/write vulnerability in DecodeBlockTypeAndLength. The supplied proof of concept generates a crafted Brotli stream to trigger decoder-state corruption...
Craft CMS 5.6.14 Server-Side Template Injection
Craft CMS versions prior to 4.14.13 and 5.6.15 contain a server-side template injection issue that can permit remote code execution when administrator changes are enabled. The proof of concept uses a malicious Entry URI Format. https://packetstorm.news/download/239468...
Bolt CMS 5.1.12 Authenticated File Rename Remote Code Execution
Bolt CMS version 5.1.12 and below contains an authenticated file upload and rename flaw that allows a ROLEEDITOR user to execute PHP code. This Metasploit proof of concept uploads PHP as text, renames it to .php, and triggers it...
Siemens SICAM Toolbox II Improper Device Certificate Validation
Siemens SICAM Toolbox II versions before V07.11 contain improper device certificate validation that may enable adversary-in-the-middle attacks. SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Improper device certificat...
WordPress 7.1.3 Upgrade Window Remote Code Execution
WordPress versions 4.7.0 through 7.1.3 contain a time-of-check to time-of-use race in the predictable, web-accessible core-update staging directory. An unauthenticated attacker can invoke the staged installer during an update and cause an attacker-controlled wp-config.php to be promoted to the li...
GitLab 19.4.1 CI Lint Regular Expression Remote Code Execution
GitLab versions 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 contain an integer overflow in CI/CD regular expression processing that can allow remote code execution. A proof of concept is included. https://packetstorm.news/download/239462...
PolicyKit 0.105 pkexec Local Privilege Escalation
PolicyKit version 0.105 pkexec contains an out-of-bounds argument handling flaw that can load an attacker-controlled gconv module and execute a local shell with elevated privileges. This proof of concept builds the module and invokes pkexec with an empty argument vector...
Bytecode Viewer 2.10.16 Arbitrary File Write
Bytecode Viewer version 2.10.16 contains a Zip Slip vulnerability that allows a crafted archive to write a file outside the intended extraction directory. The proof of concept creates such an archive and reproduces the vulnerable extraction behavior. https://packetstorm.news/download/239448...