279389 matches found
GeographicLib v2.5.1 - stack buffer overflow
Exploit title: GeographicLib v2.5.1 - stack buffer overflow Date of discovery: 20 August 2025 Exploit Author: Me zer0matt Rosario Matteo Grammatico Vendor homepage: https://github.com/geographiclib/ Software link: https://github.com/geographiclib/geographiclib Affected version: GeographicLib =...
GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)
Exploit Title: GUnet OpenEclass E-learning platform """ def banner: printf'''YELLOW ┏━╸╻ ╻┏━╸ ┏━┓┏━┓┏━┓┏━┓ ┏━┓┏━┓┏━┓╻ ╻╺┓ ┃ ┃┏┛┣╸ ╺━╸┏━┛┃┃┃┏━┛┣━┓╺━╸┏━┛┏━┛┏━┛┗━┫ ┃ ┗━╸┗┛ ┗━╸ ┗━╸┗━┛┗━╸┗━┛ ┗━╸┗━╸┗━╸ ╹╺┻╸ RED Author: @Ashif1337 RESET''' def cleanserveropeneclass,filename: printf"ORANGE+ Removing...
OpenKM 6.3.12 - Multiple
Exploit Title: OpenKM Multiple Critical Zero-Day Date: 17 Jan 2026 Exploit Author: Terra System Labs Pvt. Ltd. Vendor Homepage: https://www.openkm.com/ Software Link: https://hub.docker.com/r/openkm/openkm-ce Version: OpenKM Community Edition 6.3.12 and OpenKM Pro Edition 7.1.47 and previous...
📄 ESP-RFID-Tool V2 PRO Traversal / XSS / Bypass / Enumeration
ESP-RFID-Tool V2 PRO suffers from bypass, cross site request forgery, cross site scripting, information leakage, path traversal, and multiple other vulnerabilities. The vendor has seemingly taken a hostile approach to responding to these findings and is uncooperative. Security Advisory:...
phpMyFAQ 4.0.16 - Improper Authorization
Exploit Title: phpMyFAQ = 4.0.16 - Improper Authorization Google Dork: N/A Date: 2026-01-23 Exploit Author: GUIA BRAHIM FOUAD Vendor Homepage: https://www.phpmyfaq.de/ Software Link: https://www.phpmyfaq.de/download/ Version: = 4.0.16 REQUIRED Tested on: Ubuntu 22.04, Apache 2.4.52, PHP 8.2.x,...
OpenWrt 23.05 - Authenticated Remote Code Execution (RCE)
Exploit Title: OpenWrt 23.05 - Authenticated Remote Code Execution RCE Date: 2026-01-17 Exploit Author: Ahmet Mersin Vendor Homepage: https://github.com/stangri/luci-app-https-dns-proxy Software Link: https://github.com/stangri/luci-app-https-dns-proxy Version: All versions prior to 2026-01-17...
Ollama Windows Auto-Update Path Traversal Persistence
Ollama for Windows versions 0.12.10 through 0.22.1 are vulnerable to a path traversal attack CVE-2026-42249 in the auto-update download mechanism, combined with a completely absent signature verification function CVE-2026-42248. Payloads are written to the startup folder and executed at next logi...
GNU InetUtils 2.6 - Telnetd Remote Privilege Escalation
Exploit Title: GNU InetUtils telnetd - Remote Privilege Escalation Date: 2026-01-24 Exploit Author: Ali Guliyev infat0x Author GitHub: https://github.com/infat0x Vendor Homepage: https://www.gnu.org/software/inetutils/ Software Link: https://ftp.gnu.org/gnu/inetutils/ Version: GNU InetUtils 2.0...
ExploitSense
ExploitSense ExploitSense is a local-first vulnerability anal...
Exploit for CVE-2026-39816
Apache NiFi CVE-2026-39816 POC Proof-of-concept demonstration...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Mozilla Firefox
CVE-202...
Exploit for Command Injection in Github Enterprise_Server
ExploitCVE-2026-3854 CVE-2026-3854 is a Remote Code Executio...
Exploit for CVE-2026-6807
This is functional proof of concept code based on the CISA discl...
offensive-security-labs
Offensive Security Labs — Penetration Testing on a Fictional T...
Exploit for CVE-2025-56537
OpenNebula-CVE-2025-56537 Exploit Title : OpenNebula 6.10...
Exploit for CVE-2025-56536
OpenNebula-CVE-2025-56536 Exploit Title : OpenNebula 6.10...
Exploit for CVE-2026-42208
LiteLLM Proxy SQL Injection GHSA-r75f-5x8p-qvmc A reproduct...
Exploit for CVE-2026-1306
CVE-2026-1306 — midi-Synth WordPress WordPress midi-Synth...