K000163675: libssh vulnerability CVE-2026-59848

Security Advisory Description A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that libssh clients keep queued indefinitely, causing unbounded memory growth and client-side denial of service. CVE-2026-59848 Impact An attacker could cause SFTP client...

CVE-2010-2883

CVE-2010-2883 PoC for CVE-2010-2883 using TTD research, Metasploit techniques, BOF+ROP and HEAP spraying for educational purposes only...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for September 2026.

Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the Data Insight DI component with a Service Pack update. Please understand that the new use of security bulletins represents a change in our communication process, not an increase in security...

CVE-2024-22752

EaseUS MobiMover 6.0.5 Build 21620 - Insecure Files and Folders Permissions MobiMoverUILaunch.exe suffers from an elevation of privileges vulnerability which can be used by an "Authenticated User" to modify the executable file of the service with a binary of his choice under bin folder . The...

CVE-2023-51764-POC

based on https://github.com/duy-31/CVE-2023-51764 and https://events.ccc.de/congress/2023/hub/en/event/smtpsmugglingspoofinge-mailsworldwide/?trk=publicpostcomment-text its just some poc port to python 3.x...

CVE-2022-38601

Suggested description Lotsia Soft Lotsia PDM PLUS v5.80.220414 was discovered to contain a buffer overflow. Vulnerability Type Buffer Overflow Vendor of Product Lotsia Soft Affected Product Code Base Lotsia PDM PLUS - 5.80.220414 Attack Type Local Impact Code execution true Impact Denial of Servi...

CVE-2023-21837

CVE-2023-21837 POC,EXP, chatGPT for me code import socket CVE-2023-21837 def checkvulnerabilitytargethost, targetport: create socket object s = socket.socketsocket.AFINET, socket.SOCKSTREAM set timeout to 30 seconds s.settimeout30 try: connect to target s.connecttargethost, targetport send exploi...

CVE-2024-24685

CVE-2024-24685 Crash File Poc for CVE-2024-24685...

CVE-2015-7547-proj-master

We are providing this code as-is. You are responsible for protecting yourself, your property and data, and others from any risks caused by this code. This code may cause unexpected and undesirable behavior to occur on your machine. This code may not detect the vulnerability on your system. Note...

CVE-2022-3172

CVE-2022-3172 demo Run poc.sh create resources chmod +x poc.sh ./poc.sh Use Curl curl https://kubernetes.default.svc/apis/metrics.k8s.io/v2beta1/ -k -H "Authorization: Bearer token"...

CVE-2017-7308

CVE-2017-7308 CVE ID: CVE-2017-7308 Publish date: 2017-03-29T20:59:00.373 Base score CVSS 3.0/3.1: 7.8 Description: The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial...

libtheora-CVE-2024-56431-PoC

Compile application source code CFLAGS="-fsanitize=address -fsanitize=undefined -g -O1" CXXFLAGS="-fsanitize=address -fsanitize=undefined -g -O1" LDFLAGS="-fsanitize=address" ./configure make Compile PoC source code g++ fuzzer.cpp -o poc -I include/ lib/.libs/libtheora.a -fsanitize=address...

CVE-2023-32560

CVE-2023-32560 Ivanti Avalanche v6.4.0.0 RCE POC Reference: https://www.tenable.com/security/research/tra-2023-27...

CVE-2026-19622 IBM Planning Analytics Local is affected by security vulnerabilities

IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper validation of sub-requests...

CVE-2026-19622

IBM Planning Analytics Local versions 2.0 and 2.1 are affected by a vulnerability where a remote attacker could bypass authentication and escalate privileges due to improper validation of sub-requests. This issue is associated with CWE-288 . The vulnerability has been addressed in IBM Planning An...

CVE-2026-19627

IBM Planning Analytics versions 2.0 and 2.1 are vulnerable to a security flaw caused by improper validation of file paths . This allows a remote attacker to read arbitrary host files and overwrite certain application files . The vulnerability is associated with CWE-22 (Path Traversal). No specifi...

CVE-2004-2549

CVE-2004-2549 Nortel Wireless LAN Access Point 2200 Series - Denial of Service Exploit-db publication at https://www.exploit-db.com/exploits/23786/ Author Alex Hernandez aka @alt3kx...

CVE-2025-24354-PoC

This repository does not have a README...

pcre2: PCRE2: Out-of-bounds write via large pattern input

A flaw was found in PCRE2. On 32-bit platforms, an attacker can provide a specially crafted large pattern, leading to an out-of-bounds write within the pcre2patternconvert function. This vulnerability can result in high integrity impact, such as data corruption, and potentially a low availability...

pcre2: pcre2: Out-of-bounds write via crafted regular expression

A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...