Lucene search
+L

188 matches found

OSV
OSV
added 2026/02/02 1:15 p.m.12 views

CVE-2026-1757

A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to fr...

6.2CVSS6AI score
SaveExploits0References3
EUVD
EUVD
added 2026/02/02 12:38 p.m.9 views

EUVD-2026-5101

A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to fr...

6.2CVSS5.7AI score0.00194EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/02/02 12:38 p.m.5 views

CVE-2026-1757 Libxml2: memory leak leading to local denial of service in xmllint interactive shell

A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to fr...

6.2CVSS5.7AI score0.00194EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/02/02 12:38 p.m.7 views

CVE-2026-1757

A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to fr...

6.2CVSS4.6AI score0.00194EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/02/02 12:38 p.m.5 views

CVE-2026-1757

A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to fr...

6.2CVSS5.7AI score0.00194EPSS
SaveExploits0References5
CVE
CVE
added 2026/02/02 12:38 p.m.65 views

CVE-2026-1757

CVE-2026-1757 describes a memory leak in the interactive shell of the libxml2 xmllint utility. When a user enters input consisting only of whitespace, the shell skips command execution but does not free the allocated buffer, allowing memory to accumulate over repeated actions. This can lead to lo...

6.2CVSS5.7AI score0.00194EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/02/02 12:38 p.m.15 views

CVE-2026-1757

A flaw was identified in the interactive shell of the xmllint utility, part of the libxml2 project, where memory allocated for user input is not properly released under certain conditions. When a user submits input consisting only of whitespace, the program skips command execution but fails to fr...

6.2CVSS5.3AI score0.00194EPSS
SaveExploits0References4
Packet Storm
Packet Storm
added 2026/01/30 12:0 a.m.207 views

📄 LibreChat MCP 0.8.2-rc2 Remote Code Execution

This proof of concept exploit targets the LibreChat MCP remote code execution vulnerability known as CVE-2026-22252. It provides a comprehensive and professional framework for detecting, testing, and exploiting the vulnerability with multiple extraction modes...

9.9CVSS6.5AI score0.03743EPSS
SaveExploits4
Positive Technologies
Positive Technologies
added 2026/01/27 12:0 a.m.13 views

PT-2026-4859

Name of the Vulnerable Software and Affected Versions Dozzle versions prior to 9.0.3 Description A flaw in Dozzle’s agent-backed shell endpoints allows a user restricted by label filters to obtain an interactive root shell in out‑of‑scope containers on the same agent host by directly targeting...

9.9CVSS5.9AI score0.00385EPSS
SaveExploits1
Packet Storm
Packet Storm
added 2026/01/27 12:0 a.m.217 views

📄 Ivanti Connect Secure 9.x / 22.x Command Injection

The provided PHP script targets CVE‑2024‑21887, a command injection vulnerability in Ivanti Connect Secure versions 9.x and 22.x It is designed to identify and exploit vulnerable systems through a crafted API request. It initializes a reusable cURL session to send malicious JSON payloads to a...

9.1CVSS5.9AI score0.99999EPSS
SaveExploits18
GithubExploit
GithubExploit
added 2026/01/26 9:58 a.m.211 views

Exploit for CVE-2026-24061

CVE-2026-24061 Vulnerability Detection and Exploitation Tool...

9.8CVSS7.5AI score0.97878EPSS
SaveExploits65
GithubExploit
GithubExploit
added 2026/01/22 8:29 p.m.226 views

Exploit for Code Injection in Lubus Wp_Query_Console

CVE-2024-50498 / 0-Click RCE Exploit - Author: Joshua Provost...

10CVSS6.4AI score0.53135EPSS
SaveExploits4
GithubExploit
GithubExploit
added 2026/01/22 5:48 p.m.225 views

Exploit for Unrestricted Upload of File with Dangerous Type in Webfulcreations Computer_Repair_Shop

CVE-2024-51793 / 0-Click RCE Exploit - Author: Joshua Provost...

10CVSS6.2AI score0.01779EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2026/01/22 12:0 a.m.193 views

📄 Oracle E-Business Suite CVE-2025-61882 Remote Code Execution

This Metasploit module exploits CVE-2025-61882 in Oracle E-Business Suite by combining server-side request forgery, path traversal, HTTP request smuggling, and XSLT injection. The exploit hosts a malicious XSL file that the target will fetch and process, leading to remote code execution. This...

9.8CVSS6AI score0.99722EPSS
SaveExploits16
GithubExploit
GithubExploit
added 2026/01/13 1:31 p.m.176 views

odfs_rce_poc

Online Discussion Forum Site 1.0 - Remote Code Execution PoC...

7.5AI score
SaveExploits0
GithubExploit
GithubExploit
added 2026/01/04 10:19 a.m.246 views

Exploit for CVE-2024-25600

🧱 BrickBreaker !Pythonhttps://img.shields.io/badge/Pytho...

10CVSS9.7AI score0.88234EPSS
SaveExploits19
Positive Technologies
Positive Technologies
added 2026/01/01 12:0 a.m.17 views

PT-2026-5655

Name of the Vulnerable Software and Affected Versions libxml2 versions affected versions not specified Description A memory leak exists in the interactive shell of the xmllint utility. When a user provides input containing only whitespace, the program does not release the allocated memory buffer,...

6.2CVSS6.1AI score0.00194EPSS
SaveExploits0References66
GithubExploit
GithubExploit
added 2025/12/30 6:21 p.m.404 views

Exploit for CVE-2025-52691

CVE-2025-52691 PoC: SmarterMail Arbitrary File Upload RCE APT...

10CVSS8.8AI score0.85457EPSS
SaveExploits15
The Hacker News
The Hacker News
added 2025/12/16 8:21 a.m.26 views

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

The security vulnerability known as React2Shell is being exploited by threat actors to deliver malware families like KSwapDoor and ZnDoor, according to findings from Palo Alto Networks Unit 42 and NTT Security. "KSwapDoor is a professionally engineered remote access tool designed with stealth in...

10CVSS7.9AI score0.99616EPSS
SaveExploits455
GithubExploit
GithubExploit
added 2025/12/12 11:31 a.m.174 views

Exploit for Deserialization of Untrusted Data in Facebook React

⚛️ React2Shell CVE-2025-55182 !Pythonhttps://img.shields...

10CVSS7.8AI score0.99616EPSS
SaveExploits384
Rows per page
Query Builder