CVE-2026-18444

There is an integer conversion vulnerability resulting in an out-of-bounds read when loading images recently discovered in NI LabVIEW. This may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI...

cypher

🌹 CYPHER TOOLS 🌹 Escrito por TMRSWRR Versão 1.0.0 Ferramentas completas para CRIPTOLOGIA. Instagram: Capture the Root 🖼️ Capturas de tela 🖼️ 📹 Como usar 📹 Clique na imagem... 🧰 Funcionalidades 🧰 Esta ferramenta inclui: 📍 HASH 📍 RSA 📍 XOR 📍 AES ECC 📍 AES CBC 📍 DES ECB 📍 FERNET 📍 RC2 📍 RC4 📍...

spybrowse

BrowseSpy Be sure to change the ftp variables throughout the code, these variables contain the username, password, & IP address of the FTP server which receives the files. This code will do the following: 1. Copy itself into the %TMP% directory & name itself ursakta.exe 2. Add a registry entry to...

CVE-2024-56331

CVE-2024-56331 Uptime-Kuma : Inclusione Locale di File LFI tramite Gestione Impropria degli URL nel monitor Real-Browser Riepilogo Una Vulnerabilità di Gestione Impropria degli URL permette a un attaccante di accedere a file locali sensibili sul server sfruttando il protocollo file:///. Questa...

BRC4-BOF-Artillery

Generic Questo repository include una raccolta di BOF generici che ho scritto nel corso del tempo. Questo repository si concentra esclusivamente sul porting e sull'esecuzione, senza modificare il codice sorgente originale per la stabilità. Sebbene in futuro possa condurre ulteriori test, non è...

SuiteCRM-RCE

CVE-2020-28328 SuiteCRM Esecuzione di codice remoto tramite impostazione di sistema del file di log e avvelenamento del file di log Panoramica Recentemente ho scoperto due vulnerabilità in SuiteCRM che forniscono una catena di attacco per un utente con privilegi limitati per ottenere l'esecuzione...

Caboom

Caboom root@kitploit: ██████╗ █████╗ ██████╗ ██████╗ ██████╗ ███╗ ███╗ ██╗ ██╔════╝██╔══██╗██╔══██╗██╔═══██╗██╔═══██╗████╗ ████║ ██║ ██║ ███████║██████╔╝██║ ██║██║ ██║██╔████╔██║ ██║ ██║ ██╔══██║██╔══██╗██║ ██║██║ ██║██║╚██╔╝██║ ╚═╝ ╚██████╗██║ ██║██████╔╝╚██████╔╝╚██████╔╝██║ ╚═╝ ██║ ██╗...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox precedente alla versione 7.0.16 è vulnerabile all'Elevazione Locale dei Privilegi tramite il seguimento di link simbolici, che porta alla cancellazione arbitraria di file e allo spostamento arbitrario di file. VirtualBox tenta di spostare i file di log come NT...

CVE-2026-64204

NI LabVIEW contains an out-of-bounds write vulnerability triggered when loading a specially crafted VI (Virtual Instrument). This memory corruption can lead to information disclosure or arbitrary code execution . Affected versions are NI LabVIEW 2026 Q3 (26.3.0) and prior . Exploitation requires ...

CVE-2026-64203 Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...

CVE-2026-64201 Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...

CVE-2026-16234

CVE-2026-16234 is a memory corruption vulnerability — specifically an Out-of-Bounds Read — in NI LabVIEW triggered when loading a specially crafted VI. Successful exploitation requires user interaction (opening the malicious file), with no prior privileges needed. The flaw can lead to information...

EUVD-2026-65585

Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a publicly accessible directory. A remote, authenticated attacker with administrative privileges could upload executable files and achieve remote code execution. Fixed in 153ec1c...

CVE-2026-75496

Webkul QloApps contains an improper file upload validation flaw. The application fails to properly validate uploaded file extensions or MIME types before moving the file to a publicly accessible directory . A remote, authenticated attacker with administrative privileges can exploit this by upload...

CVE-2026-59184 OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row return an...

CVE-2026-59184

OpenEXR (the reference implementation for the EXR image format, widely used in motion picture pipelines) is affected by a memory corruption vulnerability in TypedFlatImageChannel::row() . A crafted EXR file with a nonzero dataWindow.min causes the function to return an invalid heap pointer, leadi...

CVE-2026-59184 OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row return an...

browse-mcp has an arbitrary file write via unconfined download and state paths

Impact browserdownload wrote a fetched file to joinsavedir, filename with no validation of savedir, and browsersavestate / browserloadstate honored an explicit path unchanged. The MCP caller controls these arguments a malicious MCP client, or an autonomous agent steered by indirect prompt injecti...

EUVD-2026-65581

browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2, browserdownload writes a fetched response body to joinsavedir, filename without validating the caller-controlled savedir, while browsersavestate and browserloadstate honor a caller-controlled path...

CVE-2026-55557

browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2 , the browser_download function writes a fetched response body to join(save_dir, filename) without validating the caller-controlled save_dir, and browser_save_state / browser_load_state honor a cal...