899078 matches found
CVE-2016-10033
PoC for CVE-2016-10033 RCE against WordPress 4.6 usage: ./CVE-2016-10033.py example: ./CVE-2016-10033.py http://site.com/ 1.2.3.4:4444 admin Python port +alterations of https://exploitbox.io/vuln/WordPress-Exploit-4-6-RCE-CODE-EXEC-CVE-2016-10033.html Required: Requests pip install requests I...
CVE-2026-24417
CVE-2026-24417: OpenSTAManager has a Time-Based Blind SQL Injection with Amplified Denial of Service Overview Field| Details ---|--- CVE ID| CVE-2026-24417 Severity| HIGH Advisory| View Advisory Discovered by| Lukasz Rybak Affected Products devcode-it/openstamanager versions: 2.9.8 CWE...
CVE-2025-4517-PoC
CVE-2025-4517-PoC PoC and explanation for CVE-2025-4517 used in a CTF I was playing. Explanation soon...
CVE-2024-38077-POC
This repository does not have a README...
CVE-2026-89062
A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error...
CVE-2026-89062
A potential out-of-bounds write vulnerability exists in the Lenovo Energy Management driver . This flaw could allow a local authenticated user to cause a blue screen error , resulting in a high impact on system availability. No specific exploit details or remediation steps are provided in the doc...
CVE-2025-5688-FreeRTOS-Plus-TCP-Out-of-Bounds-Write
CVE-2025-5688 – FreeRTOS-Plus-TCP Out-of-Bounds Write Exploit Remote memory corruption / DoS / potential RCE trigger in FreeRTOS-Plus-TCP when processing overly long DNS names in LLMNR or mDNS queries Buffer Allocation Scheme 1. Exploit Author: Mohammed Idrees Banyamer Country: Jordan Instagram:...
CVE-2023-52235-PoC-SPACEX-STARLINK-DNS-Rebinding
https://hackintoanetwork.com/blog/2023-starlink-dns-rebinding-attack-eng...
CVE-2026-3055
🔥 NetScalerBleed2: Critical Unauth Memory Overread in Citrix NetScaler CVE-2026-3055 Unauthenticated Out-of-Bounds Memory Read Memory Leak Only on appliances configured as SAML Identity Provider IdP 📋 Overview CVE-2026-3055 is a critical out-of-bounds read vulnerability CWE-125 in Citrix NetScale...
CVE-2014-0224
This repository does not have a README...
mysslstrip
mysslstrip mysslstrip is a Python-based proof of concept showing how to MITM MySQL traffic and strip SSL/TLS, as per CVE-2015-3152. Usage mysslstrip.py -h -p LISTENPORT -i LISTENINTERFACE dest Example Output root@duo1 python2.7 mysslstrip.py -p 3307 127.0.0.1:3306 2015-04-29 21:33:14+0000 - Log...
CVE-2026-111280
snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea that allows malicious S7 peers to overflow client buffers via an unchecked DataLength field. Rogue or impersonated PLCs can return crafted ReadVar responses causing memcpy of up to 65535 bytes into...
CVE-2026-111272
LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image...
CVE-2026-111274
unarr through 1.1.1 contains a heap-based out-of-bounds read in zipparseextrafields in zip/parse-zip.c due to an incorrect ZIP64 extra field length check. Attackers can supply a crafted ZIP archive with 0xFFFFFFFF sentinel values and a truncated ZIP64 record to read past the heap buffer and crash...
CVE-2026-111275
nifticlib through 3.0.1 contains a stack-based out-of-bounds read and write vulnerability in nifticonvertn2hdr2nim because the NIfTI-2 dim0 value is never range-checked. Attackers can supply a crafted 540-byte NIfTI-2 header read via niftiimageread to crash applications or corrupt stack memory...
CVE-2026-111269
libical through 4.0.6 contains a heap-based out-of-bounds read in icalvaluedecodeicalstring in src/libical/icalvalue.c when decoding input ending in a backslash. Attackers can supply escaped iCalendar text with a trailing backslash, causing the loop to read past the terminator and crash the...
CVE-2026-111271
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2 in src/loadams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS module whose pattern effect bytes keep bit 7 set, driving the decoder...
CVE-2026-111270
libmodplug through 0.8.9.1 contains a heap-based out-of-bounds write in CSoundFile::ReadDSM in src/loaddsm.cpp because nPat is never checked against MAXPATTERNS. Attackers can supply a crafted DSM file with over 240 PATT chunks or a wrapping pattlen value to corrupt heap memory and crash the...
CVE-2024-58397
MP4v2 through 2.1.3 contains a heap-based out-of-bounds read in MP4File::GetChapters that allows attackers to read past heap allocations via crafted QuickTime chapter samples. Attackers can supply an MP4 file whose chapter sample is shorter than its declared title length, crashing applications li...