CVE-2026-84243 gettext: Directory traversal via the LANGUAGE environment variable

The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries that contain '/' or that are equal to "..", unless the program is setuid or setgid ATSECURE. An attacker who can set LANGUAGE in the environment of a program that uses gettext c...

Exploit for Improper Handling of Length Parameter Inconsistency in Mongodb

cve-2025-14847-scanner.py...

CVE-2026-119762 Axigen Mail Server before 10.5.69, 10.6.40, and 10.7.2 Unauthenticated DoS via Nested Requests

Axigen Mail Server before 10.5.69, 10.6.x before 10.6.40, and 10.7.x before 10.7.2 contains an unauthenticated denial of service vulnerability caused by unbounded nesting depth when parsing SOAP/XML and JSON request bodies before authentication. Attackers can send a single deeply nested request t...

CVE-2026-61826

Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the apinsplex namespace in bazarr/api/plex/oauth.py omits @authenticate on its Resource handlers, while normal APIs require an API key and no global authentication hook compensates. Anonymous callers can invoke POST...

CVE-2026-104066

A flaw was found in Scribus. By tricking a user into importing or placing a specially crafted Macintosh Picture PICT image file with inconsistent dimension data, an attacker can trigger a heap-based buffer overflow during pixel unpacking. This flaw can allow an attacker to achieve arbitrary code...

CVE-2026-104067

A flaw was found in Scribus. This vulnerability can lead to arbitrary code execution or a Denial of Service DoS due to an application crash. The StarView Metafile SVM import plugin fails to verify that bitmap and transparency mask dimensions match when processing files. An attacker could exploit...

CVE-2026-104062

A flaw was found in Scribus. This flaw allows an attacker to achieve arbitrary code execution or cause a denial of service DoS by convincing a user to open or import a specially crafted PICT image file. The issue occurs due to improper boundary checks in the PICT image loader and import plugin,...

poc_CVE-2025-24016

This repository does not have a README...

CVE-2022-1015-1016

CVE-2022-1015 & CVE-2022-1026 This README.md is a translation of David's blog. David found CVEs 1015 and 1016 in the Linux kernel. You can visit his website to read the original document. Here are his social media links: Twitter Github An analysis of the two new Linux vulnerabilities in nftables...

CVE-2021-3560

A NYCU CVE-2021-3560 research. QQ A CVE-2021-3560 poc, easy to read and learn. reference from POC by hakivvi. Thanks to hakivvi. He saved a lot of my time. run: 1. compile the exploit: $ gcc -g cve-2021-3560poc.c -o cve-2021-3560 /usr/lib/x8664-linux-gnu/libdbus-1.so...

CVE-2019-16278-PoC

CVE-2019-16728-PoC CVE-2019-16728 Reference https://git.sp0re.sh/sp0re/Nhttpd-exploits/src/branch/master/CVE-2019-16278.sh...

bunch-of-fuzzers-developed-using-libfuzzer-and-asan

bunch-of-fuzzers-developed-using-libfuzzer-and-asan...

CVE-2018-19320

CVE-2018-19320 Exploiting ring0 memcpy-like functionality to disable Driver Signing Enforcement DSE as documented here: http://deniable.org/windows/windows-callbacks References https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-19320...

CVE-2021-30573-PoC-Google-Chrome

CVE-2021-30573-PoC-Google-Chrome Google Chrome Use After Free vulnerability reported by S4E Team Total Bug Bounty Reward: $6.000 This is Proof of Concept for: Google SecuritySeverity CVE HIGH CVE-2021-30573 https://vulners.com/cve/CVE-2021-30573 Google Blog post:...

CVE-2016-0051

Proof-of-concept BSoD Blue Screen of Death and Elevation of Privilege to SYSTEM code for my CVE-2016-0051 MS-016. vulnerabilty poc auhor: koczkatamas https://twitter.com/koczkatamas Original code: https://github.com/koczkatamas/CVE-2016-0051 Thanks to koczkatamas this PoC will run from CMD and th...

RCE-RealEstateVIDEOPOC

This repository does not have a README...

iocs

Zscaler ThreatLabz IOCs This repository contains Indicators of Compromise IOCs from the Zscaler ThreatLabz team. Follow us on Twitter: @Threatlabz Blog: https://www.zscaler.com/blogs/security-research...

CVE-2023-21716-POC

CVE-2023-21716-POC Microsoft Word Remote Code Execution Vulnerability...

CVE-2025-61882-Oracle-EBS

Oracle E-Business Suite — CVE-2025-61882 This repository contains ZeroZenX’s research artifacts and a fully operational exploit implementation for CVE-2025-61882, provided to support defensive research, incident response, detection engineering, and patch verification in authorized environments...

desc_race

descrace iOS 15.1 kernel exploit POC for CVE-2021-30955 Huge thanks to @realBrightiup for the awesome bug and exploit stratergy. His writeup can be found at: https://www.cyberkl.com/cvelist/cvedetail/24...