0-click-RCE-Exploit-for-CVE-2024-50526

CVE-2024-50526 / Exploit RCE 0-Click Auteur : Joshua Provoste https://x.com/JoshuaProvoste/status/1859403137435459727 Ce dépôt contient une preuve de concept de l'exploitation de CVE-2024-50526, une vulnérabilité de téléchargement arbitraire de fichier sans authentification dans le plugin WordPre...

snyk-js-jquery-174006

Ce dépôt contient les correctifs pour CVE-2019-11358 - vulnérabilité de pollution des prototypes qui affecte toutes les versions de jQuery antérieures à 3.4.0. Ces correctifs ont été générés avec diff -u original patched patchfile. Appliquer les correctifs Vous pouvez appliquer les correctifs ave...

CVE-2018-17431-PoC

CVE-2018-17431-PoC Preuve de concept pour CVE-2018-17431 Titre de l'exploit : Comodo Firewall & Central Manager UTM Toutes versions avant 2.7.0 et 1.5.0 – Exécution de commandes à distance basée sur Web Shell Auteur de l'exploit : Milad Fadavvi Page du fournisseur : https://www.comodo.com/ Lien d...

CVE-2026-85455

MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication...

CVE-2026-85440

MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote attackers to write arbitrary data by declaring a negative packet length. Attackers can exploit the signed integer check in InflateTo and negative size conversi...

CVE-2026-85455 MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet

MOOS core-moos through 10.4.0 contains a buffer over-read vulnerability in CMOOSCommPkt where a four-byte packet triggers out-of-bounds memory access during deserialization. Attackers can open a TCP connection to the MOOSDB port and send a crafted short packet to read memory before authentication...

CVE-2026-85440

MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow in the MOOSCommPkt packet-handling code. During the HandShake phase , a remote attacker can declare a negative packet length , which bypasses the signed integer check in InflateTo() and causes a negative size conversion in ...

CVE-2026-85440 MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Length

MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote attackers to write arbitrary data by declaring a negative packet length. Attackers can exploit the signed integer check in InflateTo and negative size conversi...

CVE-2026-85440 MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Length

MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulnerability in MOOSCommPkt packet handling that allows remote attackers to write arbitrary data by declaring a negative packet length. Attackers can exploit the signed integer check in InflateTo and negative size conversi...

pySigma

pySigma pySigma — это библиотека Python, которая разбирает правила Sigma и преобразует их в запросы. Она заменяет унаследованный инструментарий Sigma sigmac, имеет гораздо более чистую архитектуру и почти полностью покрыта тестами. Бэкенды для поддержки преобразования в языки запросов и конвейеры...

CVE-2026-64195 Out Of Bounds Write parsing a .DSB file in DASYLab due to lack of proper validation of user-supplied data

There is an out-of-bounds write vulnerability in DASYLab due to lack of proper validation of user-supplied data. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. This issue affects all versions before 2026.0.0...

ReverseSocks5

ReverseSocks5 Обратный SOCKS5-прокси, написанный на Golang. Использование root@kitploit: Usage of ReverseSocks5.exe: -cert string Certificate file if using TLS on the server -connect string Connect address for socks agent address:port -key string Private key file if using TLS on the server -liste...

CVE-2022-26134

CVE-2022-26134 Injection sans authentification dans le langage de navigation dans le graphe d'objets OGNL de Confluence Confluence est un produit de collaboration pour espaces de travail basé sur le Web, développé par Atlassian. Il peut être déployé sur site ou dans le cadre d'Atlassian Cloud. Il...

CVE-2026-35616-check

Outil d'évaluation de la vulnérabilité CVE-2026-35616 Détectez en toute sécurité si un serveur FortiClient EMS est vulnérable à CVE-2026-35616 sans provoquer de perturbation. Consultez l'article complet sur le blog de Bishop Fox. Description CVE-2026-35616 est un contournement d'authentification...

CVE-2026-84849

Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce = 2.3 versions...

CVE-2026-84849 WordPress Pre-Orders for WooCommerce plugin <= 2.3 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce = 2.3 versions...

EUVD-2026-70597

Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce = 2.3 versions...

CVE-2026-84849

CVE-2026-84849 affects the Pre-Orders for WooCommerce WordPress plugin in versions 2.3 and earlier . The vulnerability is an unauthenticated bypass , meaning no prior login is required to exploit it. The CVSS 3.1 score is 6.5 (MEDIUM) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N, indicati...

CVE-2026-84831

SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password for an MFA-required but unenrolled account can access protected functionality without providing a second factor...

CVE-2025-14857-MongoBleed

CVE-2025-14847 MongoBleed - PoC Fonctionnelle Exploitation de Fuite Mémoire dans MongoDB - Attaque R6 Simulée Preuve de Concept Complète pour CVE-2025-14847 MongoBleed Testé : ✅ MongoDB 7.0.5 | 14.300+ Exploits Réussis | 4 UUIDs Fuités 🎯 À propos du Projet Ce dépôt contient une Preuve de Concept...