CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804: Schwachstelle bezüglich Rechteausweitung im Microsoft Windows Cross Device Service Proof of Concept für eine CrossDevice/FrameServer-LPE, die ich an MSRC gemeldet habe und die CVE-2026-66804 erhalten hat. Sie betrifft Windows 10 und Windows 11. Schwachstelle Windows registriert...

cve-2019-14287-PPT

Este repositorio nao tem um README...

uWSGI-CVE-2018-7490-POC

Este repositorio nao tem um README...

cve-2019-5736-poc

CVE-2019-5736 Proof of Concept Dies hängt einen String an die runc-Binärdatei des Hosts an. Bringen Sie Ihren eigenen Payload mit siehe stage2.c. Ausführen: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...

Online-Admission-System-RCE-PoC

Questo repository non contiene un README...

stagefright-cve-2015-3864

stagefright-cve-2015-3864 PoC - Binäre Patches für CVE-2015-3864 NICHT für die Produktion, Verwendung auf eigene Gefahr...

CVE-2026-77357 Mesop: DoS in /hot-reload endpoint allows unauthenticated attacker to exhaust worker threads and crash the server

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthenticated attacker to hold worker threads...

CVE-2026-77357

Mesop is a Python-based UI framework for building web applications. Prior to 1.3.3 , applications running in debug mode expose a GET /hot-reload endpoint containing an unbounded loop that depends on a user-supplied counter parameter. An unauthenticated attacker can send a request with a high coun...

CVE-2026-77357 Mesop: DoS in /hot-reload endpoint allows unauthenticated attacker to exhaust worker threads and crash the server

Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.3, applications running in debug mode expose a GET /hot-reload endpoint whose unbounded loop depends on the user-supplied counter parameter, allowing an unauthenticated attacker to hold worker threads...

CVE-2023-33768

CVE-2023-33768 Beschreibung Eine falsche Signaturverifizierung der Firmware während des Geräte-Firmware-Updates des Belkin Wemo Smart Plug WSP080 v1.2 ermöglicht es Angreifern, einen Denial of Service DoS durch eine manipulierte Firmware-Datei zu verursachen. Zusätzliche Informationen Bei der...

CVE-2026-53965 MCP PHP SDK: Unbounded SSE buffer in HttpTransport enables client-side denial of service

The MCP PHP SDK Composer package mcp/sdk is the official Model Context Protocol SDK for PHP. In versions 0.5.0 through 0.7.0, the HTTP client transport reads a Server-Sent Events response stream incrementally and appends each chunk to an in-memory buffer with no upper bound. The buffer is only...

CVE-2026-53965 MCP PHP SDK: Unbounded SSE buffer in HttpTransport enables client-side denial of service

The MCP PHP SDK Composer package mcp/sdk is the official Model Context Protocol SDK for PHP. In versions 0.5.0 through 0.7.0, the HTTP client transport reads a Server-Sent Events response stream incrementally and appends each chunk to an in-memory buffer with no upper bound. The buffer is only...

CVE-2026-53965

CVE-2026-53965 affects the MCP PHP SDK (Composer package mcp/sdk), versions 0.5.0 through 0.7.0 . The HttpTransport class's processSSEStream() method appends each 4 KiB read chunk to an in-memory buffer ($this->sseBuffer) with no upper bound ; the buffer is only flushed upon encountering the S...

CVE-2026-80101 Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation

A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...

CVE-2026-80101

A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...

CVE-2026-80101

A flaw in GIMP's file-xwd plugin causes a heap out-of-bounds read when processing a specially crafted XWD image file. The root cause is that the plugin validates the image width and bytes-per-line parameters independently, rather than ensuring their combined values are consistent with the allocat...

CVE-2026-77680

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in...

CVE-2026-80101

A flaw was found in the file-xwd plugin in GIMP. When processing a specially crafted XWD image file, the plugin validates the image width and bytes-per-line parameters independently rather than ensuring their combined values are consistent with the allocated buffer size. This incorrect validation...

CVE-2026-55637

creationtimestamp| type| source ---|---|--- 2026-08-25 20:35:33+00:00| published-proof-of-concept| https://github.com/GeiserX/genieacs-mcp/security/advisories/GHSA-cmwv-wf9p-p8wx 2026-08-26 12:32:44+00:00| seen| https://gist.github.com/alon710/f1f1abcaa50d05cc95fe39660771a422...

CVE-2026-55663

creationtimestamp| type| source ---|---|--- 2026-08-25 20:35:20+00:00| published-proof-of-concept| https://github.com/versatica/mediasoup/security/advisories/GHSA-p7x2-g5cq-fhmq 2026-08-26 08:09:19+00:00| seen| https://gist.github.com/alon710/61d0254c7e615b862b27242bae8aadcf...