1949457 matches found
CVE-2026-41940
π₯ CVE-2026-41940 β cPanel & WHM Auth Bypass β‘ Unauthenticated Root β SessionβFile CRLF Injection β‘ βOne chain to rule them all.β π§ The Exploit in a Nutshell βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ β Stage 1 ββ Mint a preβauth session cookie β β Stage 2 ββ CRLF injection vi...
cve-2017-8890-msf
Module: Phoenix Talon CVE 2017-8890 This may resolve issue 8571, which requests Phoenix Talon modules. Overview of 2017-8890 This CVE: is the most serious member of the Phoenix Talon class of Linux kernel vulnerabilities. No POC of this CVE exists in the Exploit DB. But other public POC's are...
Sourcetrail
Sourcetrail Important Note: This project was archived by the original autors and maintainers of Sourcetrail by the end of 2021. If you want to know more about this decision, read more on our blog. Sourcetrail is a free and open-source cross-platform source explorer that helps you get productive o...
CVE-2019-5420
CVE-2019-5420 Exploit for Rails CVE-2019-5420 The issue Until Rails v5.2.2, when secure the sessions in development mode, the application derives the key from the name of the application...
-CVE-2024-39614
Proof of Concept PoC for Denial-of-Service Vulnerability in Django This repository contains a Proof of Concept PoC script demonstrating a denial-of-service DoS vulnerability in Django versions 5.0 before 5.0.7 and 4.2 before 4.2.14. The vulnerability lies in the getsupportedlanguagevariant...
SOC235---Atlassian-Confluence-Broken-Access-Control-0-Day-CVE-2023-22515
EVENTID-197 field| Value ---|--- EventID| 197 Event Time| Nov, 09, 2023, 09:47 AM Rule| SOC235 - Atlassian Confluence Broken Access Control 0-Day CVE-2023-22515 Level| Security Analyst Hostname| Confluence Data Center Destination IP Address| 172.16.17.234 Source IP Address| 43.130.1.222 HTTP...
CVE-2026-49049
CVE-2026-49049 This repository contains a Python-based scanner and proof-of-concept for a vulnerability in the Joomla Helix3 component. The bug is an arbitrary file write issue that can lead to remote code execution RCE when an attacker is able to write a PHP payload into a web-accessible locatio...
CVE-2026-54121-Certighost
π‘ AI Security Tool Module CVE-2026-54121: Active Directory Certificate Services Impersonation Certighost Official Security Audit Module for AI Security Tool Ecosystem π Web Demo β’ π Project Website β’ π¬ Community Chat Website Navigation: Home β’ Updates β’ Downloads β’ Modules π§ Conceptual Overview...
cve-2026-86547-mrubyc-op-enter
CVE-2026-86547 β mrubyc OPENTER NULL Pointer Dereference Standalone proof of concept for CVE-2026-86547 , a NULL pointer dereference in mrubyc's openter handler through release 4.0.0. Summary mrubyc is a lightweight Ruby implementation for embedded systems. Its bytecode VM keeps the current...
CVE-2023-4636
CVE-2023-4636 The vulnerability in the limelight is an unauthenticated remote code execution RCE issue stemming from insufficient controls on file paths occurring during image processing via Imagick. It enables adversaries to supply files via FTP, leading to local file inclusion and remote code...
DSpace__DSpace_CVE-2016-10726_4-4
Installation instructions may be found in DSpace-Manual.pdf, offered with the source archives in the SourceForge project: http://sourceforge.net/projects/dspace/files/DSpace%20Stable/VERSION/ Replace "VERSION" with the version you are installing, such as "4.0". DSpace version information can be...
CVE-2026-107794
ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call avextend av, len-1 . On an empty list, this undeflows, and avextend will allocate an array with 2^32 slots, leading to memory exhaustion. Note that a similar issue was...
CVE-2026-107794 ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list
ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call avextend av, len-1 . On an empty list, this undeflows, and avextend will allocate an array with 2^32 slots, leading to memory exhaustion. Note that a similar issue was...
CVE-2026-107794
The ExtUtils::Typemaps::STL::List Perl module (versions before 1.07 ) contains a memory exhaustion vulnerability. The root cause is an integer underflow (CWE-191) occurring within the OUTPUT typemaps call, where av_extend( av, len-1 ) is executed on an empty list. This causes the system to attemp...
EUVD-2026-96315
ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call avextend av, len-1 . On an empty list, this undeflows, and avextend will allocate an array with 2^32 slots, leading to memory exhaustion. Note that a similar issue was...
CVE-2026-107794 ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list
ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call avextend av, len-1 . On an empty list, this undeflows, and avextend will allocate an array with 2^32 slots, leading to memory exhaustion. Note that a similar issue was...
CVE-2026-107794
ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call avextend av, len-1 . On an empty list, this undeflows, and avextend will allocate an array with 2^32 slots, leading to memory exhaustion. Note that a similar issue was...
chusa
chusa: ζ³¨ε° Chusa - ζ³¨ε° is an open source penetration testing tool based on SQLmap that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a...
CVE-2021-21972
CVE-2021-21972 CVE-2021-21972 VMware vSphere Client Unauthorized File Upload to Remote Code Execution RCE The vSphere Web Client HTML5 is essentially an administrative interface that enables management of a vSphere installation. The vSphere Client provides an administrator with access to the key...
CVE-2026-98343
A flaw was found in the Linux kernel. A local user can exploit a use-after-free vulnerability in the Direct Memory Access DMA engine to cause a Denial of Service DoS via a system crash. The issue occurs when the channel cleanup routine attempts to access device information after the underlying...