292901 matches found
Exploit for CVE-2026-98260
CVE-2026-98260 — Android arm64 POSIX Timer UAF for Redmi K80 P...
Exploit for CVE-2026-98432
CVE-2026-98432 temporary mitigation, iptables variant This re...
xoxss
XOX$$ Advanced, persistent, context-aware XSS scanner for a...
breaking-python-lab
Breaking Python Lab Read this in other languages: Español...
Cybersecurity-CTF-Labs-Collection-Web-Application-Security-Exploit-Analysis
Cybersecurity-CTF-Labs-Collection-Web-Application-Security-Exp...
keycloak-manage-users-composite
keycloak-manage-users-composite A help-desk account that is o...
keycloak-saml-redirect-param-split
keycloak-saml-redirect-param-split Someone with no Keycloak a...
Exploit for CVE-2026-58115
node-red-scanner Local triage for CVE-2026-58115, the 10...
Exploit for CVE-2026-98432
CVE-2026-98432 mitigation for Ubuntu CVE-2026-98432 is a use-...
pentest-mcp
pentest-mcp !PyPIhttps://img.shields.io/pypi/v/pentester-...
Exploit for CVE-2026-98260
Determination of Kernel CVE Applicability on Locked Devices...
XZ Utils 5.6.1 Backdoor Proof of Concept
This proof of concept sets up isolated OpenSSH endpoints with XZ Utils version 5.6.1's modified liblzma to demonstrate pre-authenticated command execution. https://packetstorm.news/download/239212...
WordPress Project Manager 4.1.1 Remote Code Execution
WordPress Project Manager versions through 4.1.1 contain an unauthenticated remote code execution vulnerability through the id parameter. This proof of concept executes commands and can deploy a PHP upload shell. https://packetstorm.news/download/239196...
PHP 8.5.12 Zero-Length Stream Bucket Memory Leak
PHP version 8.5.12 contains a native heap memory leak in stream-filter cleanup when a user-defined filter appends a zero-length bucket during close. The proof of concept repeatedly triggers the leak...
PHP 8.5.12 Stream Filter Guard Bypass
PHP version 8.5.12 contains a logical guard bypass in stream filter handling. The proof of concept sets a negative consumed-byte value in a custom user filter, causing an unsigned conversion that bypasses the pre-buffered-data validation check...
Apple RawCameraSupport 9420 Heap Buffer Overflow
Apple RawCameraSupport version 9420 contains a heap-based buffer overflow in its decoder for compressed Phase One IIQ raw images. The proof of concept generates a crafted IIQ file that triggers an out-of-bounds write during flat-field correction processing...
...[ More ]
This Metasploit module exploits an unauthenticated SQL injection in the Cisco Secure Email Gateway SEG Email Cloud Scanner ECS URL-retrospective message database. A sender-controlled Message-ID is placed inside a fixed PostgreSQL dollar-quoted string without escaping. The module sends one email...
Microsoft Active Directory Certificate Services Chase Fallback Domain Controller Impersonation
Microsoft Active Directory Certificate Services contains a chase fallback flaw that allows a low-privileged domain user to impersonate a Domain Controller through a crafted certificate request. This Metasploit module requests a certificate, performs PKINIT, and can perform DCSync...
OpenIdentityPlatform OpenAM 16.0.5 Pre-Authentication Remote Code Execution
OpenIdentityPlatform OpenAM versions prior to version 16.0.6 contain a pre-authentication remote code execution vulnerability through unsafe deserialization of the jato.clientSession HTTP parameter. This proof of concept sends a crafted serialized object to Password Reset endpoints and returns...