749586 matches found
CVE-2026-93395
CVE-2026-93395 is an integer underflow in the bson_new_from_buffer() function of libbson (the MongoDB C driver's BSON library). The function reads a 32-bit document length from input but fails to verify it is at least 5 (the minimum valid BSON document size). When the length field is zero , the e...
EUVD-2026-81901
Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch DoS...
EUVD-2026-80943
Svelte devalue: DoS via malformed input...
EUVD-2026-82432
fulgur converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page with no upper bound. This is fixed in...
CVE-2026-54627
SAIL is a cross-platform image library. In versions 0.9.10 and earlier , a mode/depth mismatch in the PSD decoder allows a crafted PSD to trigger a heap out-of-bounds write : psd_private_sail_pixel_format() resolves a one-channel Bitmap-mode PSD to a one-bit pixel format, while sail_codec_load_fr...
CVE-2026-54626
SAIL is a cross-platform image loading and saving library. In versions 0.9.10 and earlier , the TGA decoder's indexed-RLE path (image_type == 9) allocates a pixel buffer using a one-byte-per-pixel format, while the load function derives a two-to-four-byte per-pixel write width from an attacker-co...
CVE-2026-92230
Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container threads. Because a ThreadLocal value outlives the OSGi bundle that created it, repeated bundle or feature install, update, or refresh operations can leave successive bundle...
remcos-decoder
Talos Decryptor POC for Remcos RAT version 2.0.5 and earlier Check ./remcosdecryptor.py -h for help. Disclaimer: This tool comes without any warranties. Use it at your own risk...
XXEinjector
XXEinjector XXEinjector automatiza la recuperación de archivos utilizando métodos directos y fuera de banda. El listado de directorios solo funciona en aplicaciones Java. Para otras aplicaciones, se debe utilizar el método de fuerza bruta. Opciones: root@kitploit: --host Mandatory - our IP addres...
laravel-poc-CVE-2018-15133
Ejecución remota de código en Laravel cuando se filtra APPKEY PoC CVE-2018-15133 Este repositorio contiene una aplicación simple de Laravel 5.6.29 en PHP 7.2.10 con una ruta noop básica añadida en routes/web.php ver Dockerfile y un exploit de Prueba de Concepto cve-2018-15133.php para...
Apache-spark-CVE-2022-33891
Apache-spark-CVE-2022-33891 Apache Spark RCE - CVE-2022-33891 PoC Follow us Vulnmachines Platform YouTube Twitter...
CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-
CVE-2025-24201 WebKit Vulnerability Detector PoC This proof-of-concept detects whether a WebKit-based browser is vulnerable to CVE‑2025‑24201 , a high-severity out-of-bounds write vulnerability caused by incorrect capability validation in the WebGL implementation. 🔍 Vulnerability Summary...
rollback_car_attack_proverif
Rollback attack formal verif ProVerif proof of concept of the Rollback attack on car keyfob CVE-2022-37418, CVE-2022-36945 and CVE-2022-37305, presented in1 Disclaimer I have no connection with the authors of 1. I am grateful to them for making their paper open access. ProVerif installation...
CVE-2020-1350
CVE-2020-1350 CVE-2020-1350 Prueba de Concepto Configuración del Entorno 1. Descargar Windows Server 2016 2. Descargar una máquina Linux una máquina secundaria para ejecutar este script 3. Instalar Active Directory/DNS en Windows Server 2016 digamos que nombraste tu dominio legítimo 33y0re.com 4...
CVE-2023-24488-PoC
Python & Golang PoC file for CVE-2023-24488 Twitter@SirBagoza...
PwnKit
PwnKit Este repositorio contiene un exploit que desarrollé para entender cómo funciona la vulnerabilidad Polkit Pkexec: CVE-2021-4034 Pkexec Local Privilege Escalation. Polkit anteriormente conocido como PolicyKit es un componente que tiene como función controlar los privilegios en los sistemas...
pentmenu
pentmenu 中文说明 Un menú de selección bash para reconocimiento de red y ataques DOS rápidos y sencillos Sudo se implementa donde es necesario. Probado en Debian y Arch. ¡Las contribuciones y pull requests son muy bienvenidas! Requisitos: bash sudo curl netcat debe soportar la opción '-k', se...
HotLoad-Driver
Hot Load Your Driver Using C++ this project was Bsides Augusta for the RAT talk. Slides can be seen bellow and are extremely helpful for understanding the execution flow. These two methods have separate projects. Demo / Slides:...
CVE-2025-61303
CVE-2025-61303 - RecordedFuture Triage: Denegación de Análisis mediante Bifurcación Recursiva de Procesos Descripción El sandbox RecordedFuture Triage en Windows 10 build 2004 y Windows 10 LTSC 2021 contiene una vulnerabilidad crítica en su motor de análisis de comportamiento de Windows que permi...