CVE-2026-56207

Apache Impala (>= 4.0.0) contains an authentication bypass in the SAML2 flow on its hs2-http interface. The Bearer token signature is not verified in the final step of the SAML2 authentication process, allowing an attacker to alter the user name and impersonate another user. Users should upgra...

CVE-2019-17382-EXPLOIT

CVE-2019-17382 - Zabbix Authentication Bypass A critical vulnerability discovered in Zabbix versions up to 4.4. The issue exists within the zabbix.php file when accessing the dashboard.view action with dashboardid=1. It enables attackers to bypass the login page, granting unauthorized access to t...

CVE-2019-15107-EXPLOIT

CVE-2019-15107 - Webmin RCE 💻🛑 The vulnerability is found in the 'old' parameter within the 'passwordchange.cgi' file of Webmin. It is prone to command injection attacks, allowing malicious actors to execute arbitrary commands by exploiting this weakness in the application. 🚨 Disclaimer Please be...

CVE-2017-9841-EXPLOIT

CVE-2017-9841 - PHPUnit Remote Code ExecutionRCE This vulnerability affects PHPUnit versions before 4.8.28 and all 5.x versions before 5.6.3. It allows attackers to execute arbitrary PHP code on servers where PHPUnit is exposed. The issue exists in the eval-stdin.php file located in PHPUnit's...

CVE-2025-32463-POC

CVE-2025-32463 – Sudo chroot Privilege Escalation PoC This repository contains a proof-of-concept PoC exploit for CVE-2025-32463, a local privilege escalation vulnerability in sudo versions 1.9.14 through 1.9.17. The vulnerability allows a local unprivileged user to escalate privileges to root by...

CVE-2021-34621-EXPLOIT

CVE-2021-34621 - WordPress Privilege Escalation A critical vulnerability has been identified in the user registration component of the ProfilePress WordPress plugin. This security flaw, assigned CVE-2021-34621, allows unauthorized users to register on websites with administrator privileges,...

CVE-2023-6931

CVE-2023-6931 Kernel Panic PoC for CVE-2023-6931 Description CVE-2023-6931 is a vulnerability in perfevent that leads to a heap buffer overflow caused by an integer overflow in the readsize of a group. What is a Performance Event perf event? perfevents is a performance monitoring and analysis...

CVE-2020-25399

CVE-2020-25399 Stored XSS in InterMind iMind Server through 3.13.65 allows any user to hijack another user's session by sending a malicious file in the chat. Information Description: Attacker can send malicious file to any user using chat functional. File may contain js payload, which executes in...

CVE-2026-54048 Apache Impala: Avro Schema URL Server-Side Request Forgery

Specifying tblproperties'avro.schema.url'=' http://...' or with a 'file:///' URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request to internal endpoints they may not have access to but that Impala does and the response my be exposed via parsing error...

CVE-2026-54048

Apache Impala versions 2.0.0 through 4.5.1 (all platforms) are affected by a Server-Side Request Forgery (SSRF) via the Avro schema URL table property. By specifying tblproperties('avro.schema.url'='http://...') or a file:/// URI, an attacker can cause Impala to issue a GET request to internal ne...

CVE-2026-43499-Redmi-Turbo5

CVE-2026-43499 Exploit for Redmi Turbo 5 This preload library is built from the duchamp-root source code. ⚠️ WARNING: For educational and authorized security research purposes only. This repository provides a proof-of-concept exploit for CVE-2026-43499 GhostLock targeting the Xiaomi Redmi Turbo 5...

ms-photos_NTLM_Leak

Microsoft ms-photos URI NTLM Leak New vulnerability allowing to leak NTLM hashes from browsers with one click By Ruben Enkaoua Description The Microsoft ms-photos URI scheme takes fileName as parameter, which can be submitted with a UNC path, leaking NTLMv2-SSP hashes one opened. By crafting a...

CVE-2024-53677-S2-067

🚨🚨 CVE-2024-53677-S2-067🚨🚨 Security Advisory: CVE-2024-53677 – Critical Apache Struts Remote Code Execution Vulnerability Advisory Date: December 14, 2024 CVE ID: CVE-2024-53677 CVSS Score: 9.5 Critical Overview A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache...

CVE-2024-42642

CVE-2024-42642 Introduction The device in question is any MX500-series SSD. These SSDs are controlled by a Sillicon-Motion SM2259 controller older batches had an older controller, Sillicon-Motion SM2258, but the main focus of this document is the newer one. SM2259 is a 4-channel SATA 6Gb/s...

CVE-2023-42829

CVE-2023-42829; 'An app may be able to access SSH passphrases' This document presents both an analysis of a logic vulnerability identified in the ssh binary on macOS my first software vulnerability!, and a patch analysis demonstrating how Apple fixed the vulnerability. I reported the issue Apple...

Trigon

Trigon Trigon is a deterministic kernel exploit based on CVE-2023-32434. It currently supports A9 - A11 devices running iOS 13 - 15.7.6 . Being deterministic means that this exploit will never panic during or after exploitation and is completely reliable. Trigon exploits an integer overflow in th...

empty_list

emptylist - exploit for p0 issue 1564 CVE-2018-4243 iOS 11.0 - 11.3.1 kernel r/w @i41nbeer BUG: getvolattrlist takes a user controlled bufferSize argument via the fgetattrlist syscall. When allocating a kernel buffer to serialize the attr list to there's the following comment: / Allocate a target...

CVE-2021-41160

CVE-2021-41160 FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client...

CVE-2024-22894

CVE-2024-22894 Downloaded the latest heatpump firmware version wp2reg-V3.88.0-9015 of https://www.heatpump24.com/DownloadArea.php. Within this firmware is a file called : wp2reg-V3.88.0-9015\wp2reg-AlphaInnotech-prod\home.wp2reg-V3.88.0-9015221213\share\shadow This contains a 3DES encrypted...

sylkie

sylkie A command line tool and library for testing networks for common address spoofing security vulnerabilities in IPv6 networks using the Neighbor Discovery Protocol. Getting Started Note: This project is still in the early phases of development. If you run into any problems, please consider...