PT-2026-106726

lrzsz before 0.13.0 contains an OS command injection vulnerability in the lrz receive utility's pipe mode that allows remote senders to execute commands by supplying crafted filenames. When lrz runs under a suffixed name such as lrztar, procheader in src/lrz.c passes the unescaped ZMODEM/YMODEM...

Cisco ASA Improper Enforcement of Message Integrity During Transmission in a Communication Channel (CVE-2021-34793)

A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance ASA Software and Firepower Threat Defense FTD Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service DoS vulnerability. This...

React Router Vulnerable to Cross-Site Scripting (XSS) via Redirect Location Mishandling (CVE-2026-22029)

React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router and Remix v1/v2 SPA open navigation redirects originating from loaders or actions in Framework Mode, Data Mode, or the unstable RSC modes can result in unsafe URLs...

CVE-2021-43471

CVE-2021-43471 未经授权访问佳能打印机导致的拒绝服务漏洞 受影响产品：LBP223 时间：2021.11.3 系统管理员模式登录不需要账户密码或PIN码。攻击者可在进入后台后远程关闭设备，从而造成拒绝服务漏洞。...

CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

CVE-2026-0461

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...

CVE-2026-0461

Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...

CVE-2026-0461

The AMD Zynq™ UltraScale+ MPSoC and RFSoC devices are vulnerable to a buffer overflow due to insufficient boundary validation in the USB boot mode implementation. An attacker could send unbounded Device Firmware Upgrade (DFU) download requests, causing the DDR receive buffer to overflow into FSBL...

CVE-2026-0482

In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to trigger a buffer overflow and overwrite an active function pointer, which may result in arbitrary code execution during boot process. This...

CVE-2026-0482

The AMD Versal™ Adaptive SoC devices are vulnerable to a buffer overflow due to insufficient boundary checks within the USB boot mode . This vulnerability can be triggered by providing crafted images when USB boot mode is enabled through specific board modifications . Successful exploitation allo...

CVE-2021-3129

CVE-2021-3129 Modo de depuración de Laravel - Ejecución remota de código RCE https://vulners.com/cve/CVE-2021-3129 https://www.ambionics.io/blog/laravel-debug-rce https://github.com/ambionics/phpggc Ejemplo python3 exploit.py http://127.0.0.1:8080 python3 exploit.py http://127.0.0.1:8080 --phar...

CVE-2021-3129

CVE-2021-3129 Herramientas de escaneo masivo para el modo de depuración de Laravel = V8.4.2, Ejecución Remota de Código RCE | Python Referencia Ambionics.io PHPGCC Cadena PHPGCC Laravel/RCE1 Laravel/RCE2 Laravel/RCE3 Laravel/RCE4 Laravel/RCE5 Laravel/RCE6 Laravel/RCE7 Monolog/RCE1 Monolog/RCE2...

CVE-2025-61155

CVE-2025-61155 — Terminación arbitraria de procesos en GameDriverX64.sys Un controlador anti-cheat firmado en modo kernel — GameDriverX64.sys, incluido con Tower of Fantasy Hotta Studio / Perfect World — permite que cualquier usuario local sin privilegios termine procesos arbitrarios , incluidos...

Zygotroller

Zygotroller Elimina propietarios de perfil/Family Link en CUALQUIER dispositivo con modo desarrollador anterior a junio de 2024 Android 12+ Zygotroller es una prueba de concepto que puede eliminar un propietario de perfil y las restricciones asociadas mediante el bug de inyección en Zygote de...

CVE-2024-37742

CVE-2024-37742: SEB ≤ 3.5.0（Windows）中的剪贴板利用漏洞 本仓库包含针对 CVE-2024-37742 的概念验证（PoC），该漏洞存在于 Windows 平台上的 Safe Exam Browser SEB ≤ 3.5.0 中。该漏洞允许攻击者在 SEB 考试模式与底层系统之间共享剪贴板数据，从而破坏考试完整性。通过利用此缺陷，攻击者可以绕过考试控制并在考试过程中获得不公平的优势。 免责声明 本仓库仅用于教育目的。此处提供的信息旨在帮助开发人员了解漏洞并保护其系统。请勿恶意或未经许可使用此漏洞。使用本 PoC...

CVE-2026-50416-writeup-and-poc

CVE-2026-50416: Un QWORD de más en el montón del escritorio En la compilación Insider de Windows 11 10.0.28020.2149, la asignación en modo usuario del montón del escritorio de Win32k exponía un puntero sin procesar del grupo del kernel de sesión en el desplazamiento 0x100. La lectura en sí es cas...

CVE-2024-56426

Exploit unificado de BootROM para Exynos 990 / Exynos9830 Herramientas unificadas para CVE-2024-56426 en las familias Exynos 990 Galaxy S20, S20 FE y Note20. El exploit acepta los diez nombres de modelo y los asigna a seis familias de bootloader de fábrica verificadas. !CAUTION El paquete de clav...

FullscreenBrowserPhishing

Phishing mediante el modo de pantalla completa en el navegador Para empezar, me gustaría señalar que el phishing es ilegal y este proyecto es solo con fines educativos. El proyecto en este repositorio es solo una PoC para mostrar cómo se puede hacer y por eso la versión pública tiene fallos : Dem...

CVE-2023-44813

CVE-2023-44813 Una vulnerabilidad de cross-site scripting XSS reflejado en el parámetro mode de la función Invite Friend de mooSocial v3.1.8 que permite a los atacantes robar las cookies de sesión de los usuarios y suplantar su cuenta mediante una URL manipulada. Parámetro vulnerable: mode Exploi...

CVE-2018-13379

CVE-2018-13379 CVE-2018-13379 https://blog.orange.tw/2019/08/attacking-ssl-vpn-part-2-breaking-the-fortigate-ssl-vpn.html https://fortiguard.com/psirt/FG-IR-18-384 Las siguientes versiones de FortiOS eran vulnerables. FortiOS 5.6.3 to 5.6.7 FortiOS 6.0.0 to 6.0.4 ONLY if the SSL VPN service...