CVE-2018-10920_PoC

CVE-2018-10920PoC Knot Resolver CVE-2018-10920 / DO NOT ABUSE...

manageengine-auditad-cve-2022-28219

Code to support my CVE-2022-28219 analysis. To execute, with Ruby and Rubygems installed: gem install httparty ruby ./manageengine-poc.rb This is designed as a proof of concept, not a stable exploit. It only runs calc. :...

CVE-2026-83360

The Oracle HRMS (Republic of Korea) product, specifically the Korean Payroll component within Oracle E-Business Suite , is affected by a vulnerability in versions 12.2.3-12.2.15 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system, potentially le...

CVE-2026-101847

A vulnerability exists in the Internal Operations component of the Oracle Bills of Material product within Oracle E-Business Suite . Affected versions include 12.2.3-12.2.15 . This is a difficult-to-exploit vulnerability that allows a low privileged attacker with network access via HTTP to compro...

CVE-2026-101842

A vulnerability exists in the Strategic Network Optimization product of Oracle E-Business Suite (component: Installation of SNO) affecting versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can compromise the product, potentially leading to a takeover , provided th...

CVE-2026-101823

The Oracle Bills of Material product, specifically the Internal Operations component within Oracle E-Business Suite (versions 12.2.3-12.2.15 ), is susceptible to a high-complexity vulnerability. A low privileged attacker with network access via HTTP can exploit this flaw to compromise the product...

CVE-2026-101822

A vulnerability exists in the Internal Operations component of the Oracle Bills of Material product within Oracle E-Business Suite (versions 12.2.3-12.2.15). A high-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the product. Successful ex...

CVE-2020-12255

CVE-2020-12255 Poc for CVE-2020-12255...

Important: Red Hat Security Advisory: rsyslog security update

An update for rsyslog is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace() function

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2026-101401

A vulnerability exists in the Siebel Apps - Marketing component of Oracle Siebel CRM (versions 17.0-26.9 ). An unauthenticated attacker with access to the underlying infrastructure can exploit this high-complexity vulnerability to compromise the product. Successful exploitation may lead to a part...

CVE-2026-101400

A vulnerability exists in the Marketing component of Oracle Siebel CRM (Siebel Apps - Marketing) , affecting supported versions 17.0-26.9 . An unauthenticated attacker with access to the underlying infrastructure can exploit this difficult to exploit vulnerability to compromise the application. S...

Poc-CVE-2025-9519

Easy Timer v4.2.1 - Prerequisites Docker Engine installed Docker Compose installed Refer to the official Docker docs for installation: Docker Engine Install 1. Start WordPress with Docker From your project directory: sudo docker-compose up -d mkdir -p wp-content/plugins cd wp-content/plugins wget...

CVE-2025-48976_CVE-2025-48988

CVE-2025-48976CVE-2025-48988 POC...

CVE-2026-113729 Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization

Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicalization in exclusivecanonicalization.go copies the complete accumulated namespace map at every nested element before reference digest or signature checks. Attacker-controlled XML containing...

CVE-2026-113729

The Moov signedxml pure Go library (prior to version 1.4.1 ) is vulnerable to an unauthenticated denial of service in its ExclusiveCanonicalization function. The root cause is that exclusivecanonicalization.go copies the complete accumulated namespace map at every nested element before performing...

CVE-2026-92387

By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer timeout mechanism, indefinitely blocking all concurrent transfers bound to the same multi-handle...

CVE-2026-107928

When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...

CVE-2021-21315-exploit

CVE-2021-21315 Exploit Des: My python Script to exploit system Information Library for Node.JS npm package "systeminformation". npmjs.com/systeminformation I thought this POC will not show real world impact, But it'll be cool in CTF's...

spectre-attack-demo

Spectre Attack Example Example of using revealed "Spectre" exploit from 2 Jan 2018 CVE-2017-5753 and CVE-2017-5715 Spectre breaks the isolation between different applications. It allows an attacker to trick error-free programs, which follow best practices, into leaking their secrets. In fact, the...