cve-2026-0013-exploit

This repository does not have a README...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Cisco ISE RADIUS Suppression DoS Vulnerability 🌐 ⚠️ Overview 🚨 High-severity denial-of-service DoS flaw in Cisco Identity Services Engine ISE! 💥 An unauthenticated remote attacker can crash the device with crafted RADIUS packets. 📅 Disclosed : November 5, 2025 ✅ No known...

Guide-and-theoretical-code-for-CVE-2023-35674

Guide-and-theoretical-code-for-CVE-2023-35674 Guide and theoretical code for CVE-2023-35674 Because android is out of my skill league please use this as a high overview from my pov on how i would exploit this cve. the code snippets are just skeletons , please help : So first of all u can't exploi...

poc-CVE-2026-0073

CVE-2026-0073 PoC Wireless ADB TLS Auth Bypass This directory contains a Python proof of concept for CVE-2026-0073. The script is generated using AI-assisted code generation techniques. Summary CVE-2026-0073 is a logic issue in ADB daemon certificate verification adbdtlsverifycert in auth.cpp. Th...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0006 2026-03-02 In multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-26465

CVE-2025-26465 The OpenSSH client contains a logic error between versions 6.8p1 to 9.9p1 inclusive that makes it vulnerable to an active MitM attack if the VerifyHostKeyDNS option is enabled, allowing a malicious interloper to impersonate a legitimate server when a client attempts to connect to i...

CVE-2024-57241

CVE-2024-57241CNNVD-2024-34500830 For web applications using DEDECMS 5.71SP1 and earlier, URL redirects occur because the source code logic error of the CMS does not judge the input GET request For web applications using DEDECMS 5.71SP1 and below, URL redirection occurs because the CMS source cod...

CVE-2026-118598

A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...

EUVD-2026-114698

A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...

CVE-2026-118598

A logic error in Epiphany (>= 45.0, through 51.x) allows a malicious website to bypass prompts for camera and microphone access. When a user approves a Clipboard or Website Data Access permission, the set_permission() function in src/ephy-window.c incorrectly falls into a branch that grants EP...

CVE-2026-118598 epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access

A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...

CVE-2026-35570

Breaking Out of the Sandbox: How I Found a Critical Path Traversal Bypass in openclaude CVE-2026-35570 | CVSS 8.4 High | openclaude v0.1.7 Not every vulnerability requires a sophisticated exploit chain. Sometimes a single misplaced return statement is enough to blow a hole straight through your...

CVE-2026-118598: GNOME Epiphany: A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user…

A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...

EUVD-2026-113332

Forge: ASN.1 OID first arc truncation in asn1.oidToDer...

CVE-2026-118775

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, asn1.oidToDer in lib/asn1.js did not range-check the first two arcs of an OID. An application that accepted an untrusted OID string, checked or authorized that string, and then encod...

CVE-2026-118598

A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...

CVE-2026-118775

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, asn1.oidToDer in lib/asn1.js did not range-check the first two arcs of an OID. An application that accepted an untrusted OID string, checked or authorized that string, and then encod...

CVE-2026-118775 Forge: ASN.1 OID first arc truncation in asn1.oidToDer

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, asn1.oidToDer in lib/asn1.js did not range-check the first two arcs of an OID. An application that accepted an untrusted OID string, checked or authorized that string, and then encod...

PT-2026-132789

Name of the Vulnerable Software and Affected Versions Forge versions prior to 1.4.1 Description The asn1.oidToDer function in lib/asn1.js fails to perform range-checking on the first two arcs of an Object Identifier OID. This allows an application that accepts and authorizes an untrusted OID stri...

EUVD-2026-112462

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service...