274856 matches found
CVE-2026-92362 ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption
A vulnerability was detected in ag-ui-protocol ag-ui 1.0. This impacts an unknown function of the file crates/ag-ui-client/src/sse.rs of the component SSE Frame Parser. Performing a manipulation results in resource consumption. The attack is possible to be carried out remotely. The pull request t...
voron-crypto
Voron crypto/protocol library — request for review This is the crypto and messaging-protocol core of a small E2EE messenger project, pulled out on its own for outside review. It is not the whole product — the Android client and deployment config are intentionally left out; this is just the part...
mojarragadget
mojarragadget description We found a new Java gadget chain in the Mojarra Library, this repo contains 2 POC to reproduce the exploit on version 2.3 and 3.0. More information here: https://www.synacktiv.com/publications/finding-gadgets-like-its-2015-part-1.html...
ROOT-OS-DEBIAN-12-CVE-2026-6238 CVE-2026-6238 in glibc - Patched by Root
Root has patched CVE-2026-6238 in the glibc package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-5450 CVE-2026-5450 in glibc - Patched by Root
Root has patched CVE-2026-5450 in the glibc package for Root:Debian:12. Multiple fixed versions available...
CLSA-2026-1789561134 TuxCare security update for org.thymeleaf:thymeleaf (1 CVE)
TuxCare rebuilt org.thymeleaf:thymeleaf to address 1 CVE. Fixed in 3.1.2.RELEASE-tuxcare.2...
CVE-2021-4034
CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: root@kitploit: vagrant@ubuntu-impish:/CVE-2021-4034$...
cve_2022_0492
Shell Script Template A modern Bash script template with colorized output formatting and utility functions for creating professional command-line tools. Features 🎨 Colorized Output : Pre-defined color schemes and formatting functions 📝 Standardized Messages : Consistent info, success, warning, an...
suds
OVERVIEW The "Suds" web services client is a lightweight soap-based client for python the is licensed under LGPL. For details, visit: Project site: https://fedorahosted.org/suds/ Documentation: https://fedorahosted.org/suds/wiki/Documentation Epydocs: http://jortel.fedorapeople.org/suds/doc/...
CLSA-2026-1789557846 TuxCare security update for cryptography (2 CVEs)
TuxCare rebuilt cryptography to address 2 CVEs. Fixed in 43.0.1.post3+tuxcare...
AZL-101126 CVE-2026-89965 affecting package kernel 6.6.152.1-1
In the Linux kernel, the following vulnerability has been resolved: nvdimm/btt: reject an arena whose nfree is below the lane count The BTT info block's nfree field, the number of reserve free blocks, is read from the medium without validation. bttfreelistinit and bttrttinit size the per-lane...
CLSA-2026-1789557122 TuxCare security update for cryptography (1 CVE)
TuxCare rebuilt cryptography to address 1 CVE. Fixed in 42.0.0.post3+tuxcare...
CVE-2025-64512
CVE-2025-64512 — pdfminer.six Insecure Deserialization Pickle via Crafted PDF ⚠️ Disclaimer: This tool is intended for educational purposes and authorized penetration testing only. Use it only against systems you own or have explicit written permission to test. Unauthorized use is illegal. Table o...
CVE-2019-19204
CVE-2019-19204 An issue was discovered in Oniguruma 6.x before 6.9.4rc2. In the function fetchintervalquantifier formerly known as fetchrangequantifier in regparse.c, PFETCH is called without checking PEND. This leads to a heap-based buffer over-read. Researcher: ManhND of The Tarantula Team,...
CVE-2025-32462_32463-Lab
CVE-2025-32462 & CVE-2025-32463 – PoC Lab This is a container-based lab and PoC for the following vulnerabilities in sudo: CVE-2025-32462 – sudo -h host matching logic bypass CVE-2025-32463 – sudo -R chroot NSS library escape 🔒 For educational purposes only. Do not use on systems you don’t own or...
CVE-2026-65650
CVE-2026-65650 — PoC: Authenticated DoS in Elgg Avatar Upload Authenticated denial of service in Elgg's avatar upload feature via unbounded image dimensions, causing GD memory exhaustion. Affected: Elgg saveIconFromUploadedFile'avatar' return elggerrorresponseelggecho'avatar:resize:fail';...
CVE-2024-4701-POC
CVE-2024-4701-POC POC for CVE-2024-4701 Download the genie docker file from https://netflix.github.io/genie/docs/4.3.0/demo/docker-compose.yml or this repo run docker-compose up Download the attached http payload loadlib Run the following command nc -w 5 localhost 8080 loadlib You may need to...
ROOT-APP-NPM-CVE-2026-82333 CVE-2026-82333 in multer - Patched by Root
Root has patched CVE-2026-82333 in the multer package for Root:npm. Multiple fixed versions available...