292901 matches found
Xiaomi Redmi K80 Pro HyperOS 3 OS3.0.305 POSIX Timer Use-After-Free
Xiaomi Redmi K80 Pro HyperOS 3 version OS3.0.305 contains an Android arm64 POSIX CPU timer use-after-free that allows an ADB shell user to obtain root privileges with full capabilities. https://packetstorm.news/download/239198...
Greenshot 1.2.10 .greenshot File Deserialization Code Execution
Greenshot version 1.2.10 contains an insecure BinaryFormatter deserialization issue in .greenshot capture files that can lead to arbitrary code execution when a crafted file is opened. This proof of concept generates crafted .greenshot files with a patched Process.Start payload...
DedeCMS 5.7.118 update_guide.php Code Injection
DedeCMS versions through 5.7.118 contain a code injection vulnerability in dede/updateguide.php. An authenticated administrator can manipulate the vtime parameter to write and include attacker-controlled PHP from a cache file, resulting in remote code execution...
Sudo 1.9.17p2 Intercept Policy Bypass
Sudo version 1.9.17p2 and earlier contains an intercept policy bypass in ptrace-based intercept mode. This proof of concept invokes execveat to execute a denied program, bypassing subcommand policy enforcement and logging. https://packetstorm.news/download/239215...
Joomla Content Editor 2.9.99.4 Remote Code Execution
Joomla Content Editor versions prior to 2.9.99.5 contain an improper access control vulnerability in profile import that allows unauthenticated remote code execution. This proof of concept imports a permissive profile and uploads a PHP payload. https://packetstorm.news/download/239220...
WordPress s2Member 260927 Remote Code Execution
WordPress s2Member plugin versions through 260927 contain a template injection vulnerability in the itemname IPN parameter that can result in remote code execution. https://packetstorm.news/download/239207...
MCPJam Inspector 1.4.2 Remote Code Execution
MCPJam Inspector versions 1.4.2 and earlier contain an unauthenticated remote code execution vulnerability through the API endpoint that installs MCP server configurations. The supplied proof of concept submits a crafted server configuration to execute a command...
Erlang/OTP SSH 27.3.2 Unauthenticated Remote Code Execution
Erlang/OTP SSH versions before 27.3.3, 26.2.5.11, and 25.3.2.20 contain an authentication-state flaw that permits unauthenticated remote code execution. This report provides proof of concept details. https://packetstorm.news/download/239206...
PHP 8.5.12 Exported API Heap Buffer Over-Read
PHP version 8.5.12 contains an exported phpstreambucketsplit API bounds-check issue that can cause a heap buffer over-read and unsigned size underflow. The proof of concept builds an extension to demonstrate the condition under AddressSanitizer...
PHP 8.5.12 Heap Buffer Overflow
PHP version 8.5.12 contains a heap buffer overflow in phpstreambucketsplit that can result in information disclosure or denial of service. ================================================================================================================================== | Title : PHP 8.5.12...
PHP 8.5.12 PharData ZIP Uncompressed Size Mismatch
PHP version 8.5.12 PharData ZIP parsing may mishandle a DEFLATE entry whose declared uncompressed size differs from its decompressed content, potentially resulting in a heap out-of-bounds read...
Payload 3.89.0 JWT Identity Override
Payload version 3.89.0 allows a user-configured saveToJWT alias of id to overwrite the authenticated user's JWT identity, enabling impersonation of the selected user. https://packetstorm.news/download/239216...
WordPress Product Gallery Slider & Additional Variation Images for WooCommerce 2.3.25 Missing Authorization
The WordPress Product Gallery Slider & Additional Variation Images for WooCommerce plugin versions 2.3.23 through 2.3.25 contain a missing authorization vulnerability that lets a Shop Manager read, modify, or delete arbitrary wpoptions rows and escalate Subscriber capabilities...
Exploit for CVE-2026-86596
CVE-2026-86596 PoC Single-file Python PoC for the s2Member...
Exploit for Deserialization of Untrusted Data in Openidentityplatform Openam
CVE-2026-33439 — OpenAM Pre-Auth RCE JATO Deserialization O...
Exploit for CVE-2026-98432
CVE-2026-98432 defender toolkit Exposure checks, hunt queries...
cyphron
cyphron Proof, not claims. An evidence-first security ass...
