CVE-2026-104383

The EagleCloud Aquila on-premises version (versions through 2.6.7.2 ) contains a code injection vulnerability in the Pigeon MFA service . This flaw, identified as CWE-94 , occurs due to the Improper Control of Generation of Code , which allows authenticated remote attackers to execute arbitrary c...

sharepoint-toolshell-cve-2025-53770

SharePoint "ToolShell" RCE Exploit CVE-2025-53770 Overview CVE-2025-53770 is a critical remote code execution RCE vulnerability affecting Microsoft SharePoint Server 2016, 2019, and Subscription Edition on-premises only, not SharePoint Online. Attackers can bypass authentication and achieve full...

EUVD-2026-111549

LibreSSL ocspcheck through 4.4.0 contains a cleartext transmission vulnerability because url2host discards the OCSP URL scheme and httpalloc only selects TLS for port 443. On-path network attackers can read OCSP requests sent to https responder URLs on non-443 ports, exposing certificate serial...

CVE-2016-5195

CVE-2016-5195 DirtyCOW PoC Modified from dirtycow.github.ioc include include include include include include include include void map; int f; struct stat st; char name; void madviseThreadvoid arg char str; str = chararg; int i, c = 0; fori = 0; i 100000000; i++ c += madvisemap, 100, MADVDONTNEED;...

dh-CVE_2016_2098

== README Proof of concept for https://groups.google.com/forum/!topic/rubyonrails-security/ly-IH-fxrQ == Exploiting: 1. You should only run rails server in a way that you are certain will not open you up to being exploited 2. Run rails s 3. Execute the following command curl -v -H "Accept:...

PT-2026-128084

When pretix is used as the identity provider in a Single-Sign-On SSO setup for customer accounts, the system did not properly validate the response type requested in an authorization request against the configured grant type of the SSO client. This means that if an SSO client was configured to on...

CVE-2026-98974

A flaw was found in the Linux kernel's XFS file system. This vulnerability allows a local user to cause unauthorized data modification or potential privilege escalation by bypassing Copy-on-Write CoW protections. When exchanging file data ranges up to the end of a file, the file system incorrectl...

CVE-2019-19547

CVE-2019-19547 CVE-2019-19547 POC Symantec EDR on-prem version prior to "4.3.0" is vulnerable to an unauthenticated reflected XSS via the following URL: https://@IPEDR/r3epmpi/v1/dx/log Reference...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method RCE https://nvd.nist.gov/vuln/detail/CVE-2016-2098 Use git clone...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-6733 DESCRIPTION: Impact: Undici's HTTP/1.1 client is vulnerable to response queue poisoning on reused keep-alive sockets. An attacker-controlled upstre...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities

Summary DataStage on Cloud Pak for Data has several vulnerabilities Vulnerability Details CVEID:CVE-2026-59949 DESCRIPTION: yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in...

CVE-2013-0156

Original Script Reference For more details on the original exploit script, refer to the gist link CVE-2013-0156 CVE-2013-0156 Exploit Script This script is specifically designed to solve the challenge on PentesterLab for the CVE-2013-0156 exploit. You can access the challenge here: PentesterLab -...

SUSE CVE-2026-115693

Improper Certificate Validation vulnerability in hackneyssl in benoitc hackney allows an on-path attacker to impersonate a server pinned to a private certificate authority via a certificate chain that ends in a publicly trusted root. hackney adds partialchain, fun hackneyssl:partialchain/1 to eve...

CVE-2020-5839

CVE-2020-5839 CVE-2020-5839 POC Symantec EDR on-prem version prior to "4.4.0" is prone to an information disclosure vulnerability via the following URL's : https://@IPEDR/r3epmpi/status/ https://@IPEDR/r3epmpi/status/routes https://@IPEDR/r3epmpi/v1/event/status/ds...

JetBrains Datalore On-Premises Unauthenticated RCE via InteractiveReport READ-to-EXECUTE Access Mapping Flaw

JetBrains Datalore On-Premises Unauthenticated RCE via InteractiveReport READ-to-EXECUTE Access Mapping Flaw """JetBrains Datalore On-Premises Unauthenticated RCE via InteractiveReport READ-to-EXECUTE Access Mapping Flaw""" from future import annotations from kittysploit import from http.server...

Samsung TVs without mics may listen through soundbars, researcher says

A reverse engineer claims that their Samsung smart TV has been collecting audio without their consent. The researcher, who calls themselves “log4j,” said in an X thread that their 2025 Samsung TV was delivering ads that seemed suspiciously relevant to them. Investigating, they claim to have found...

CVE-2026-111459

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...

EUVD-2026-110617

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...

CVE-2026-111459 Unauthenticated server-supplied OpenVPN configuration in Moxa Remote Connect Suite (MRC Client)

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite MRC Client. Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle...

CVE-2026-111459

An improper certificate validation vulnerability exists in the Moxa Remote Connect Suite (MRC Client) . An unauthenticated attacker with on-path access to the communication between the MRC Client and its server can impersonate a trusted server. This allows for a man-in-the-middle (MITM) attack , ...