php-exploit_cve-2022-31630

CVE-2022-31630 – Proof of Concept Exploit Warning: This code is made only for educational purposes and testing in an isolated laboratory environment. Use on other systems without permission is illegal and irresponsible. 📌 Description CVE-2022-31630 is an Out-of-Bounds OOB Read vulnerability in th...

Microsoft-Word-CVE-2017-0199-

Microsoft-Word-CVE-2017-0199- Description: Microsoft Word CVE-2017-0199 is prone to a RCE trough a HTA Handler A remote code execution vulnerability exists in the way that Microsoft Office and WordPad parse specially crafted files. An attacker who successfully exploited this vulnerability could...

CVE-2025

CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption Overview CVE-2025-43300 is a critical memory corruption vulnerability in Apple's image processing framework that affects iOS 18.6.1 and macOS systems. The vulnerability exists in the JPEG Lossless decompression code within...

hcxtools

hcxtools A small set of tools to convert packets from capture files to hash files for use with Hashcat or John the Ripper. These tools are 100% compatible with Hashcat and John the Ripper and are endorsed by Hashcat. Brief Description The main purpose of hcxtools is to detect weak points within...

TRAI-001-Critical-RCE-Vulnerability-in-Apache-Parquet-CVE-2025-30065-Simulation

TRAI-001 CVE-2025-30065: Apache Parquet Remote Code Execution RCE Exploit Simulator Demo Screenshot Simulator interface demonstrating the exploit chain 📌 Overview This repository contains an educational simulation of CVE-2025-30065, a critical Remote Code Execution vulnerability in Apache Parquet...

CVE-2023-4590

CVE-2023-4590 PoC of Frhed Free hex editor v1.6.0 - Buffer overflow SEH written by dgndrn Usage Execute exploit.py, copy all string at created payload.txt then use it to as parameter to open Frhed.exe Frhed.exe payload...

CVE-2026-54984

CVE-2026-54984 Windows ICC file parsing out-of-bounds write — remote code execution Reported through the Zero Day Initiative as ZDI-CAN-30441 , published as ZDI-26-543 , fixed by Microsoft in the August 2026 update cycle. Hi, I'm Kağan Çapar. I reported this vulnerability to the Zero Day...

bandiview-7.05-vuln-PoC

bandiview-7.05-vuln-PoC This repository contains a PoC for vulnerabilities uncovered in Bandiview 7.05 using fuzzing CVE-2024-45870 JXR File Parsing DoS Vulnerability CVE-2024-45871 PSD File Parsing DoS Vulnerability CVE-2024-45872 PSD File Parsing Stack Buffer Overflow Details Software: BandiVie...

CVE-2025-70330

🧩 CVE-2025-70330: Easy Grade Pro 4.1 File Parsing Vulnerability An educational example created to show beginners that vulnerability research through reverse engineering is possible from the very start. 📑 Table of Contents Why this repository exists Relation to "The Path That Leads to Your First...

EUVD-2026-110182

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Parsing a file may lead to an unexpected app termination or arbitrary code execution...

CVE-2026-112688

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27.2 and iPadOS 27.2, macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Parsing a file may lead to an unexpected app termination or arbitrary code execution...

Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Pixar Animation Studio OpenUSD. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within th...

PT-2026-125505

Pixar Animation Studio OpenUSD Crate File Parsing Double Free Remote Code Execution Vulnerability...

SUSE SLES12 Security Update : cifs-utils (SUSE-SU-2026:4897-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4897-1 advisory. This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing bsc128493...

Exploit for CVE-2026-112900

Python Pillow Critical RCE Flaw CVE-20...

Security update for cifs-utils

This update for cifs-utils fixes the following issue: CVE-2026-104715: mount options injection via CIFS credentials-file parsing bsc1284932. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you ca...

SUSE-SU-2026:4897-1 Security update for cifs-utils

This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing bsc1284932...

SUSE-SU-2026:24372-1 Security update for cifs-utils

This update for cifs-utils fixes the following issue: - CVE-2026-104715: mount options injection via CIFS credentials-file parsing bsc1284932...

CentOS Linux 7 [TuxCare] Security Update: gstreamer1-plugins-base / gstreamer1-plugins-base-devel / etc (CENTOS7:CLSA-2026:1790603589)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1790603589 advisory. - GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu...

NVIDIA Megatron Bridge YAML File Parsing Code Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Megatron Bridge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...