PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0009 2026-06-01 In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-57241

CVE-2024-57241CNNVD-2024-34500830 For web applications using DEDECMS 5.71SP1 and earlier, URL redirects occur because the source code logic error of the CMS does not judge the input GET request For web applications using DEDECMS 5.71SP1 and below, URL redirection occurs because the CMS source cod...

Guide-and-theoretical-code-for-CVE-2023-35674

Guide-and-theoretical-code-for-CVE-2023-35674 Guía y código teórico para CVE-2023-35674 Debido a que Android está fuera de mi liga, por favor usa esto como una visión general desde mi punto de vista sobre cómo explotaría este CVE. Los fragmentos de código son solo esqueletos, por favor ayuda : As...

EUVD-2026-71665

In the Linux kernel, the following vulnerability has been resolved: net: packet: fix wrong transportheader when sending VLAN-tagged frame In packetparseheaders, when processing a VLAN-tagged frame, skbsetnetworkheader is called to advance networkheader past the VLAN tag to the inner protocol...

EUVD-2026-70523

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In dfba919e218e20d52db9f7b2e8d292d45a46c91b and prior, normal beneficiary payout paths in StreamingEscrow preserve depositAmount...

CVE-2026-85030

A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element is an unknown function of the file service/server/routesagent.py of the component selfRegister API Endpoint. Such manipulation of the argument initialbalance leads to business...

poc-CVE-2026-0073

CVE-2026-0073 PoC Wireless ADB TLS Auth Bypass This directory contains a Python proof of concept for CVE-2026-0073. The script is generated using AI-assisted code generation techniques. Summary CVE-2026-0073 is a logic issue in ADB daemon certificate verification adbdtlsverifycert in auth.cpp. Th...

CVE-2026-85030

HKUDS AI-Trader (a simulated trading/competition platform) contains a business logic error in the selfRegister API Endpoint within service/server/routes_agent.py. By manipulating the initial_balance argument, a remote attacker can inflate their starting cash/equity value. However, because profit_...

CVE-2026-35570

Rompiendo el Aislamiento del Sandbox: Cómo Encontré un Bypass Crítico de Path Traversal en openclaude CVE-2026-35570 | CVSS 8.4 Alto | openclaude v0.1.7 No todas las vulnerabilidades requieren una cadena de explotación sofisticada. A veces una sola sentencia return mal colocada es suficiente para...

cve-2026-0013-exploit

This repository does not have a README...

CVE-2026-35250

CVE-2026-35250 mi primer CVE es un 2.3 Desbordamiento de enteros en DevVGAVBVA puede causar DoS desde un invitado privilegiado Hallazgo asistido por IA y PoC completamente escrito por IA El problema está en src/VBox/Devices/Graphics/DevVGAVBVA.cpp:740-743 ASSERTGUESTMSGRETURN donde la comprobació...

CVE-2026-53670

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343：Cisco ISE RADIUS 抑制 DoS 漏洞 🌐 ⚠️ 概述 🚨 高危 拒绝服务（DoS）漏洞，存在于 Cisco Identity Services Engine ISE ！ 💥 未认证的远程攻击者 可通过精心构造的 RADIUS 数据包 使设备崩溃 。 📅 披露时间 ：2025年11月5日 ✅ 尚无野外利用 （目前！） 🛠️ 工作原理 🔄 “拒绝来自重复失败客户端的 RADIUS 请求” 设置中存在 逻辑错误 。 🕵️‍♂️ 攻击者发送 精心构造的 RADIUS Access-Request ，目标是 被拒绝的 MAC 地址 。 💣 触发...

SUSE CVE-2026-72376

In the Linux kernel, the following vulnerability has been resolved: afs: Fix misplaced inc of net-cellsoutstanding Fix net-cellsoutstanding being incremented before the check for failure of idralloccyclic, leaving the count incremented on error...

CVE-2025-26465

CVE-2025-26465 OpenSSH 客户端在 6.8p1 至 9.9p1（含）版本之间存在一个逻辑错误，如果启用了 VerifyHostKeyDNS 选项，则容易受到主动中间人（MitM）攻击，当客户端尝试连接时，恶意入侵者可以冒充合法服务器。 此检测方法如何工作？ 该模板匹配以下易受攻击的版本： root@kitploit: - "SSH-2.0-OpenSSH6.8p1" - "SSH-2.0-OpenSSH6.9p1" - "SSH-2.0-OpenSSH7.0p1" - "SSH-2.0-OpenSSH7.1p1" - "SSH-2.0-OpenSSH7.2p1" -...

GHSA-V358-WF77-39XV klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits

Summary In processPercentageRoyaltiesTransfer the royalty pool is collected from the sender by SubFromBalance that is ordered after the split loop and after if royaltiesToPay royaltiesToPay, so a split entry of exactly 100% PercentTransferPercentage = 10000 is a valid config: it drives...

klever-go: Percentage-transfer royalty skips the source debit at exactly-100% splits

Summary In processPercentageRoyaltiesTransfer the royalty pool is collected from the sender by SubFromBalance that is ordered after the split loop and after if royaltiesToPay royaltiesToPay, so a split entry of exactly 100% PercentTransferPercentage = 10000 is a valid config: it drives...

CVE-2026-55763 Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, processPercentageRoyaltiesTransfer in core/kapp/accounts/accounts.go calls SubFromBalance after the split loop and after the royaltiesToPay royaltiesToPay, so a valid PercentTransferPercentage = 10000 split...

CVE-2026-55763

CVE-2026-55763 affects Klever-Go (the Go implementation of the Klever blockchain), prior to version 1.7.19 . In processPercentageRoyaltiesTransfer (core/kapp/accounts/accounts.go), the sender's royalty debit via SubFromBalance is ordered after the split loop and after the royaltiesToPay

CVE-2026-54754

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderData.ReferralPercentage from the listing while reading asset.Royalties.MarketPercentage live at purchase time. An asset owner can create a...