CVE-2026-78050

CVE-2026-78050 is a stack-based buffer overflow in the Web Management component of Comfast CF-N1-S firmware 2.6.0.1 . The vulnerable function sub_41AD7C is reachable via the CGI endpoint /cgi-bin/mbox-config?method=SET&section=ntp_timezone. Manipulating the timestr or ntp_client_enabled argument ...

CVE-2026-77988

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...

CVE-2026-77988 TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command injection

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...

CVE-2026-77988

A command injection vulnerability exists in the TRENDnet TEW-823DRU (firmware 1.1.02b01), specifically in the nvram_get function of the CLI Configuration Tool . The flaw allows a remote attacker with high privileges to inject and execute arbitrary commands. A proof-of-concept exploit has been mad...

EUVD-2026-64252

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvramget of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the publ...

CVE-2026-77945

A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public...

EUVD-2026-64245

A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public...

Exploit for Code Injection in Vmware Spring_Cloud_Function

No d...

Exploit for CVE-2026-0740

No d...

VulnCheck KEV: CVE-2025-10164

A security flaw has been discovered in lmsys sglang 0.4.6. Affected by this vulnerability is the function main of the file /updateweightsfromtensor. The manipulation of the argument serializednamedtensors results in deserialization. The attack can be launched remotely. The exploit has been releas...

PT-2026-79528

A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulation of the argument filename results in command injection. The attack may be initiated remotely. The exploit has been made public...

PT-2026-79532

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram get of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the...

PT-2026-79742

Name of the Vulnerable Software and Affected Versions Comfast CF-N1-S version 2.6.0.1 Description A stack-based buffer overflow exists in the Web Management component. The issue occurs when the device processes input for NTP timezone settings via the /cgi-bin/mbox-config?method=SET&section=ntp...

Apache OFBiz Directory Traversal - Remote Code Execution

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13 id: CVE-2024-32113 info: name: Apache OFBiz Directory Traversal - Remote Code Execution author: DhiyaneshDK severity: high description: |...

Confluence - Remote Code Execution

Confluence Server and Data Center is susceptible to an unauthenticated remote code execution vulnerability. id: CVE-2022-26134 info: name: Confluence - Remote Code Execution author: pdteam,jbertman severity: critical description: | Confluence Server and Data Center is susceptible to an...

PS4-5.05-Kernel-Exploit

Exploit del kernel PS4 5.05 Riepilogo In questo progetto troverai un'implementazione completa del secondo exploit del kernel "bpf" per PlayStation 4 sulla versione 5.05. Ti permetterà di eseguire codice arbitrario in modalità kernel, per consentire il jailbreak e modifiche a livello di kernel del...

exploits

Questo repository non contiene un README...

spark-exploit

Esecuzione di codice arbitrario in un cluster Apache Spark non protetto Come sfruttarlo Segui i passaggi seguenti: root@kitploit: $ git clone https://github.com/akhld/spark-exploit.git $ cd spark-exploit Esecuzione di codice remota Apri exploit.scala, sostituisci il codice seguente con qualunque...

Exploit for CVE-2026-64638

Cve-2...

CVE-2026-77683

A security flaw has been discovered in Comfast CF-N1-S 2.6.0.1. Affected by this issue is the function system of the file /cgi-bin/mbox-config?method=SET&section=ntptimezone. The manipulation of the argument timestr results in command injection. The attack can be launched remotely. The exploit ha...