20102 matches found
Exploit for Deserialization of Untrusted Data in Facebook React
This Proof of Concept PoC for React2Shell CVE-2025-55182 vul...
Exploit for CVE-2026-20841
Purpose The purpose of this work is to investigate the RCE vul...
Allocation of Resources Without Limits or Throttling
Overview org.webjars.npm:qs is a querystring parser that supports nesting and arrays, with a depth limit. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the parseArrayValue function when the comma option is in use. An attacker can...
PT-2026-7921
FTP Navigator 8.03 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler SEH registers. Attackers can craft a malicious payload that triggers a buffer overflow when pasted into the Custom Command textbox, enabling remot...
Verifiable Provenance of Software Artifacts with Zero-Knowledge Compilation
Verifying that a compiled binary originates from its claimed source code is a fundamental security requirement, called source code provenance. Achieving verifiable source code provenance in practice remains challenging. The most popular technique, called reproducible builds, requires difficult...
Exploit for CVE-2026-20841
CVE-2026-20841 PoC PoC of the "Windows Notepad RCE" vulnerabi...
CVE-2025-32467
creationtimestamp| type| source ---|---|--- 2026-02-11 13:17:13+00:00| published-proof-of-concept| https://t.me/truesecator/7898...
CVE-2025-27572
creationtimestamp| type| source ---|---|--- 2026-02-11 13:17:13+00:00| published-proof-of-concept| https://t.me/truesecator/7898...
CVE-2025-27940
creationtimestamp| type| source ---|---|--- 2026-02-11 13:17:13+00:00| published-proof-of-concept| https://t.me/truesecator/7898...
CVE-2025-32007
creationtimestamp| type| source ---|---|--- 2026-02-11 13:17:13+00:00| published-proof-of-concept| https://t.me/truesecator/7898...
Exploit for Double Free in Microsoft
CVE-2025-62215 Vulnerability Analysis Windows Kernel Race Con...
📄 motionEye 0.43.1b4 Remote Code Execution
Client-side validation in motionEye's web UI can be bypassed via overriding the JS validation function. Arbitrary values including shell interpolation syntax can be saved into the motion config. When motion is restarted, the motion process interprets the config and can execute shell syntax embedd...
Security Assessment of Intel TDX with Support for Live Migration
In the second and third quarters of 2025, Google collaborated with Intel to conduct a security assessment of Intel Trust Domain Extensions TDX, extending Google's previous review and covering major changes since Intel TDX Module 1.0 - namely support for Live Migration and Trusted Domain TD...
PT-2026-7659
Name of the Vulnerable Software and Affected Versions Grafana affected versions not specified Description Public dashboards with annotations enabled did not restrict the annotation timerange to the locked timerange of the public dashboard. This allowed reading the complete history of annotations...
motionEye 0.43.1b4 - RCE
Exploit Title: motionEye 0.43.1b4 - RCE Exploit PoC: motionEye RCE via client-side validation bypass safe PoC Filename: motioneyercepocedb.txt Author: prabhatverma47 Date tested: 2025-05-14 original test; prepared for submission: 2025-10-11 Affected Versions: motionEye = 0.43.1b4 Tested on: Debia...
Windows 10.0.17763.7009 - spoofing vulnerability
Exploit Title: Windows 10.0.17763.7009 - spoofing vulnerability Google Dork: N/A Date: 2025-10-06 Exploit Author: Beatriz Fresno Naumova Vendor Homepage: https://www.microsoft.com Software Link: N/A Version: Not applicable this is a generic Windows library file behavior Tested on: Windows 10 x64 ...
Exploit for Generation of Error Message Containing Sensitive Information in Drupal
Enumeration tool for CVE-2024-45440 by DividesByZer0 & c0d3Ninja...
Exploit for CVE-2026-25526
jinjava-cve...