EUVD-2026-123575

A deserialization of untrusted data vulnerability was discovered in Lenovo System Update that could allow a local authenticated user to execute code with elevated privileges...

CVE-2026-77882

A deserialization of untrusted data vulnerability exists in Lenovo System Update . This flaw allows a local authenticated user to execute arbitrary code with elevated privileges . While the specific component or root cause is not detailed in the provided documents, the vulnerability carries a hig...

CVE-2023-36250

CVE-2023-36250 CSV Injection vulnerability in GNOME time tracker version 3.0.2, allows local attackers to execute arbitrary code via crafted .tsv file when creating a new record. Vulnerability Type CSV Injection Discoverer Bruno Teixeira Reference http://gnome.com Affected Product Code Base GNOME...

CVE-2026-126624

Progressive Robot hMailServer version 6.3.7 contains a vulnerability related to Unverified Ownership in its Windows installer. A local authenticated user can execute arbitrary code as the mail server's service account (LocalSystem or its virtual account) or as an administrator. This occurs when t...

CVE-2024-55503

CVE-2024-55503 Termius App MacOS dylib Command injection Description An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLDINSERTLIBRARIES component. using dylib DYLDINSERTLIBRARIES=exploitcombined.dylib...

CVE-2024-50986

CVE-2024-50986: DLL Hijacking Exploit for Clementine Description: An issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted DLL file. Version Affected: Clementine v.1.3.1 Researcher: Utkarsh r1971d3 LinkedIn NIST CVE Link:...

CVE-2025-8110

CVE-2025-8110 Improper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code. How does this detection method work? Extracts the Gogs version from the footer of /user/login via regex Gogs Version: X.X.X and flags instances running version 0.13.3 or earlier as...

pics

Welcome! Binary posters 25 posters 2017-10-30 59 tracings 2022-28-11 !https://assets.kitploit.com/production/public/readmes/48012/84626b...

CVE-2023-39063

CVE-2023-39063 This repository contains an exploit for the vulnerability CVE-2023-39063 found in the RaidenFTPD v2.4.4005 software. The exploit has been created to work with Python 3. Exploit Details Python 3 code to exploit a SEH based Buffer Overflow vulnerability in RaidenFTPD v.2.4.4005. This...

CVE-2026-96054

Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code locally...

CVE-2026-95896

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an authorized attacker to execute code locally...

CVE-2026-95891

Heap-based buffer overflow in Windows Microsoft DirectMusic allows an authorized attacker to execute code locally...

CVE-2026-124225

Improper control of generation of code 'code injection' in Windows PowerShell allows an unauthorized attacker to execute code locally...

CVE-2026-121662

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code locally...

CVE-2026-119849

Stack-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to execute code locally...

CVE-2026-114165

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

CVE-2026-114167

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

CVE-2026-113848

Null pointer dereference in Windows NTFS allows an unauthorized attacker to execute code locally...

EUVD-2026-122472

Improper neutralization of special elements used in a command 'command injection' in Visual Studio Code allows an unauthorized attacker to execute code locally...

CVE-2026-121662

A command injection vulnerability (CWE-77) exists in Visual Studio Code due to the improper neutralization of special elements used in a command. This flaw allows an unauthorized attacker to achieve arbitrary code execution locally. The vulnerability has been addressed in a security update from M...