Exploit for CVE-2025-12057

CVE-2025-12057 – WordPress WavePlayer RCE PoC Proof of Concep...

PT-2026-25402

Lean 4 VS Code Extension is a Visual Studio Code extension for the Lean 4 proof assistant. Projects that use @leanprover/unicode-input-component are vulnerable to an XSS exploit in 0.1.9 of the package and lower. The component re-inserted text in the input element back into the input element as...

SentinelX

SentinelX SentinelX — статический анализатор безопасности...

Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft

CVE-2026...

Files or Directories Accessible to External Parties

Overview Affected versions of this package are vulnerable to Files or Directories Accessible to External Parties via the dev server configuration when server.fs.strict is set to false. An attacker can access sensitive files on the host system by sending crafted requests to the development server...

Exploit for Deserialization of Untrusted Data in Nextgen Mirth_Connect

Mirth Connect PoC Script Simple Python script for security re...

Exploit for Deserialization of Untrusted Data in Nextgen Mirth_Connect

CVE-2023-43208 — Mirth Connect RCE !Pythonhttps://img.shie...

Exploit for Out-of-bounds Write in Netapp Bootstrap_Os

Typeform DevSecOps Pipeline POC !Pythonhttps://img.shields...

Exploit for Infinite Loop in Linux Linux_Kernel

CVE-2025-38001---Linux-Kernel-HFSC-RBTree-Use-After-Free-Resea...

CVE-2026-32614

creationtimestamp| type| source ---|---|--- 2026-03-12 03:40:38+00:00| published-proof-of-concept| https://github.com/emmansun/gmsm/security/advisories/GHSA-5xxp-2vrj-x855...

CVE-2019-25467

Verypdf docPrint Pro 8.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized alphanumeric encoded payload in the User Password or Master Password fields. Attackers can craft a malicious payload with...

CVE-2019-25467

CVE-2019-25467 affects Verypdf docPrint Pro 8.0. The issue is a structured exception handling (SEH) buffer overflow in processing the User Password or Master Password fields during PDF encryption, enabling local code execution via an oversized alphanumeric-encoded payload with crafted shellcode, ...

CVE-2026-32106

creationtimestamp| type| source ---|---|--- 2026-03-11 14:50:41+00:00| published-proof-of-concept| https://github.com/withstudiocms/studiocms/security/advisories/GHSA-wj56-g96r-673q...

CVE-2026-32104

creationtimestamp| type| source ---|---|--- 2026-03-11 14:50:34+00:00| published-proof-of-concept| https://github.com/withstudiocms/studiocms/security/advisories/GHSA-9v82-xrm4-mp52...

CVE-2026-32103

creationtimestamp| type| source ---|---|--- 2026-03-11 14:50:26+00:00| published-proof-of-concept| https://github.com/withstudiocms/studiocms/security/advisories/GHSA-h7vr-cg25-jf8c...

Unauthorized access to Argo Workflows Template

Summary Workflow templates endpoints allow any client to retrieve WorkflowTemplates and ClusterWorkflowTemplates. Any request with a Authorization: Bearer nothing token can leak sensitive template content, including embedded Secret manifests. Details...

CVE-2026-32110

creationtimestamp| type| source ---|---|--- 2026-03-11 01:11:29+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-56cv-c5p2-j2wg...

CVE-2026-31975

creationtimestamp| type| source ---|---|--- 2026-03-11 00:37:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-gv8f-wpm2-m5wr...

PT-2026-24798

WeGIA is a web manager for charitable institutions. Prior to version 3.6.6, a critical SQL injection vulnerability exists in the WeGIA application. The remover produto ocultar.php script uses extract$ REQUEST to populate local variables and then directly concatenates these variables into a SQL...

📄 FreeFloat FTP Server 1.0 Buffer Overflow

Proof of concept exploit for a buffer overflow vulnerability in FreeFloat FTP Server version 1.0. The exploit works by sending an overly long payload through the NOOP FTP command, which overflows the server's buffer and allows control of the EIP Extended Instruction Pointer...