DEBIAN-CVE-2026-39113

Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f106951d496b05cbe61d12c2c448f2f24b6d5d Git mirror 169f68ed88b34cb68f720191c64c058f2ccec508, 2026-03-11 and later snapshots/builds allows an attacker to cause a...

CVE-2026-66804

CVE-2026-66804: EoP della fotocamera virtuale Cross Device Scoperto e segnalato in modo indipendente, il problema è ora tracciato come CVE-2026-66804. MSRC ha confermato che la segnalazione è un duplicato di un rapporto precedente con la stessa causa principale sottostante di Windows Camera...

CVE-2020-28488

CVE-2020-28488 Denial of Service DoS - jQuery UI 1.12.1 - Exploit Payload root@kitploit: for var i = 0; i DoS - jQuery UI 1.12.1 DoS - jQuery UI 1.12.1 Exploit PoC von Rafael Cintra Lopes function exploit for var i = 0; i...

CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804: Schwachstelle bezüglich Rechteausweitung im Microsoft Windows Cross Device Service Proof of Concept für eine CrossDevice/FrameServer-LPE, die ich an MSRC gemeldet habe und die CVE-2026-66804 erhalten hat. Sie betrifft Windows 10 und Windows 11. Schwachstelle Windows registriert...

cve-2019-14287-PPT

Este repositorio nao tem um README...

uWSGI-CVE-2018-7490-POC

Este repositorio nao tem um README...

cve-2019-5736-poc

CVE-2019-5736 Proof of Concept Dies hängt einen String an die runc-Binärdatei des Hosts an. Bringen Sie Ihren eigenen Payload mit siehe stage2.c. Ausführen: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

Online-Admission-System-RCE-PoC

Questo repository non contiene un README...

stagefright-cve-2015-3864

stagefright-cve-2015-3864 PoC - Binäre Patches für CVE-2015-3864 NICHT für die Produktion, Verwendung auf eigene Gefahr...

CVE-2026-77357 Mesop: DoS in /hot-reload endpoint allows unauthenticated attacker to exhaust worker threads and crash the server

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthenticated attacker to hold worker threads...

CVE-2026-77357

Mesop is a Python-based UI framework for building web applications. Prior to 1.3.3 , applications running in debug mode expose a GET /hot-reload endpoint containing an unbounded loop that depends on a user-supplied counter parameter. An unauthenticated attacker can send a request with a high coun...

CVE-2026-77357 Mesop: DoS in /hot-reload endpoint allows unauthenticated attacker to exhaust worker threads and crash the server

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthenticated attacker to hold worker threads...

CVE-2023-33768

CVE-2023-33768 Beschreibung Eine falsche Signaturverifizierung der Firmware während des Geräte-Firmware-Updates des Belkin Wemo Smart Plug WSP080 v1.2 ermöglicht es Angreifern, einen Denial of Service DoS durch eine manipulierte Firmware-Datei zu verursachen. Zusätzliche Informationen Bei der...

CVE-2026-53965 MCP PHP SDK: Unbounded SSE buffer in HttpTransport enables client-side denial of service

The MCP PHP SDK Composer package mcp/sdk is the official Model Context Protocol SDK for PHP. In versions 0.5.0 through 0.7.0, the HTTP client transport reads a Server-Sent Events response stream incrementally and appends each chunk to an in-memory buffer with no upper bound. The buffer is only...

CVE-2026-53965 MCP PHP SDK: Unbounded SSE buffer in HttpTransport enables client-side denial of service

The MCP PHP SDK Composer package mcp/sdk is the official Model Context Protocol SDK for PHP. In versions 0.5.0 through 0.7.0, the HTTP client transport reads a Server-Sent Events response stream incrementally and appends each chunk to an in-memory buffer with no upper bound. The buffer is only...

CVE-2026-53965

CVE-2026-53965 affects the MCP PHP SDK (Composer package mcp/sdk), versions 0.5.0 through 0.7.0 . The HttpTransport class's processSSEStream() method appends each 4 KiB read chunk to an in-memory buffer ($this->sseBuffer) with no upper bound ; the buffer is only flushed upon encountering the S...

CVE-2026-80101 Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation

A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...

CVE-2026-80101

A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...

CVE-2026-80101

A flaw in GIMP's file-xwd plugin causes a heap out-of-bounds read when processing a specially crafted XWD image file. The root cause is that the plugin validates the image width and bytes-per-line parameters independently, rather than ensuring their combined values are consistent with the allocat...

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...