EUVD-2026-76931

A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This issue affects some unknown processing of the component MailReceiver. Performing a manipulation results in deserialization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be...

CVE-2026-90490

lenve vhr 1.0-SNAPSHOT is affected by a deserialization flaw in the MailReceiver component that can be exploited remotely with low privileges and no user interaction. The vulnerability yields low impact on confidentiality, integrity, and availability (CVSS 3.1 base score 6.3 , MEDIUM). A proof-of...

CVE-2026-90490 lenve vhr MailReceiver deserialization

A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This issue affects some unknown processing of the component MailReceiver. Performing a manipulation results in deserialization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be...

CVE-2024-48990-POC

CVE-2024-48990-POC PoC simple para CVE-2024-48990 vulnerabilidad de escalada de privilegios con needrestart. https://www.qualys.com/2024/11/19/needrestart/needrestart.txt Descripción General Esto fue diseñado mientras trabajaba en el desafío de HackTheBox, 'Conversor'. Se realizarán modificacione...

exploit-CVE-2025-55182-poc

CVE-2025-55182 - React Server Components プロトタイプチェーン脆弱性 このPOCは、実際の脆弱なコードである [email protected] を使用して CVE-2025-55182 を実証します。 CVE-2025-55182 緊急修正ガイド: Next.js/React RSC 脆弱性 CVSS 10.0 の完全な分析と緩和策 このリポジトリは https://github.com/ejpir/CVE-2025-55182-poc からフォークされたもので、まだ検証されていません! 十分に注意し、慎重に検証してください!...

EUVD-2026-76922

A vulnerability was determined in Xuxueli xxl-job up to 3.4.2. This affects the function GroovyClassLoader.parseClass of the file xxl-job-core/src/main/java/com/xxl/job/core/glue/GlueFactory.java. This manipulation causes code injection. Remote exploitation of the attack is possible. The exploit...

EUVD-2026-76921

A vulnerability was found in Xuxueli xxl-job up to 3.4.2. Affected by this issue is some unknown functionality of the file xxl-job-admin/src/main/java/com/xxl/job/admin/business/controller/JobGroupController.java. The manipulation results in improper privilege management. The attack may be launch...

EUVD-2026-76924

A vulnerability was identified in Xuxueli xxl-job up to 3.5.0. This vulnerability affects unknown code of the file /jobinfo/insert. Such manipulation of the argument name/author leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used...

EUVD-2026-76913

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and m...

CVE-2026-9999-exploit

CVE-2026-9999 — Chrome ANGLE/Metal WebGL PoC 漏洞挖掘工具（macOS） 1. 漏洞摘要 字段| 值 ---|--- CVE| CVE-2026-9999 厂商 / 产品| Google Chrome 受影响版本| Chrome 148.0.7778.216，仅限 macOS 1 修复版本| 148.0.7778.216 1 影响| 通过特制 HTML 页面在沙箱内 执行任意代码 1 Chromium 严重级别| 高 1 CVSS 3.1（CISA-ADP）| 8.8 高危 —...

CVE-2026-90489

A vulnerability was identified in Xuxueli xxl-job up to 3.5.0. This vulnerability affects unknown code of the file /jobinfo/insert. Such manipulation of the argument name/author leads to cross site scripting. The attack can be executed remotely. The exploit is publicly available and might be used...

CVE-2026-90488

A vulnerability was determined in Xuxueli xxl-job up to 3.4.2. This affects the function GroovyClassLoader.parseClass of the file xxl-job-core/src/main/java/com/xxl/job/core/glue/GlueFactory.java. This manipulation causes code injection. Remote exploitation of the attack is possible. The exploit...

linux-exploit-suggester-2

このリポジトリには README がありません。...

CVE-2021-3156-plus

CVE-2021-3156 これは、@CptGibbonをベースにした改造版で、任意のコマンド実行をサポートしています。 関連記事：CVE-2021-3156 - Exploit修正 CVE-2021-3156 の Root shell PoC（ブルートフォース不要） 教育目的など。 テスト済み： @CptGibbon Ubuntu 20.04、sudo 1.8.31 @Rvn0xsy Ubuntu 17.10 すべての研究クレジット：Qualys Research Team 詳細はブログをご覧ください。 sudoのバージョンが脆弱かどうかは、次のコマンドで確認できます：$ sudoed...

Joomla-CVE-2023-23752-Exploit-Script

使い方 root@kitploit: python exploit.py http://example.com...

GhostESP v2.2-pre1

The ESP-IDF-native wireless security platform for ESP32. Deep Wi-Fi and BLE assessment, research-grade capture and export, and a real app ecosystem. Built directly on Espressif's ESP-IDF rather than through the Arduino core, so new silicon and radio features land first and there is no abstraction...

PT-2026-90845

A vulnerability was found in SourceCodester School Registration and Fee System 1.0. The affected element is an unknown function of the file /bilal/normal/pay report.php. Performing a manipulation of the argument period results in sql injection. The attack can be initiated remotely. The exploit ha...

PT-2026-90842

A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/save stud.php. Such manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

PT-2026-90877

A vulnerability was determined in davenardella snap7 up to 1.4.3. The affected element is the function TSnap7MicroClient::opUpload of the file src/core/s7 micro client.cpp. Executing a manipulation of the argument DataLen can lead to memory corruption. The attack can be executed remotely. The...

PT-2026-90803

A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw of the file /boafrm/formPortFw of the component boa. This manipulation of the argument service type causes buffer overflow. It is possible to initiate the attack remotely. The exploit has...