20111 matches found
📄 HTMLDOC 1.9.13 Stack Buffer Overflow
Proof of concept exploit written in PHP for HTMLDOC version 1.9.13 that generates a malicious BMP file that will trigger a stack buffer overflow vulnerability...
ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay
A cryptographic semantic binding flaw in ALTCHA libraries allows challenge payload splicing, which may enable replay attacks. The HMAC signature does not unambiguously bind challenge parameters to the nonce, allowing an attacker to reinterpret a valid proof-of-work submission with a modified...
CVE-2025-68146
creationtimestamp| type| source ---|---|--- 2025-12-15 23:55:35+00:00| published-proof-of-concept| https://github.com/tox-dev/filelock/security/advisories/GHSA-w853-jp5j-5j7f...
CVE-2025-68142
creationtimestamp| type| source ---|---|--- 2025-12-15 22:07:58+00:00| published-proof-of-concept| https://github.com/facelessuser/pymdown-extensions/security/advisories/GHSA-r6h4-mm7h-8pmq...
CVE-2025-68130
creationtimestamp| type| source ---|---|--- 2025-12-15 19:48:47+00:00| published-proof-of-concept| https://github.com/trpc/trpc/security/advisories/GHSA-43p4-m455-4f4j...
Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components
CVE-2025-55182 also referred to as React2Shell and includes CVE-2025-66478, which was merged into it is a critical pre-authentication remote code execution RCE vulnerability affecting React Server Components, Next.js, and related frameworks. With a CVSS score of 10.0, this vulnerability could all...
CVE-2025-68927
creationtimestamp| type| source ---|---|--- 2025-12-15 19:17:13+00:00| published-proof-of-concept| https://github.com/abhinavxd/libredesk/security/advisories/GHSA-wh6m-h6f4-rjf4 2026-01-02 15:08:07+00:00| published-proof-of-concept| Telegram/iY4yZ2PFpGxByFsrgplKVch9nhT5x9DeCvqvBNZo45zgPeM...
CVE-2025-67748
creationtimestamp| type| source ---|---|--- 2025-12-15 18:20:33+00:00| published-proof-of-concept| https://github.com/trailofbits/fickling/security/advisories/GHSA-r7v6-mfhq-g3m2 2026-01-02 18:47:00+00:00| published-proof-of-concept| Telegram/909Vqfy1t-GN-jmnJRhonTHruzsnwKWBWvcbC9dRm7P3pmc...
Exploit for Deserialization of Untrusted Data in Facebook React
Exploitest This repository serves as a cent...
Exploit for Path Traversal in Rarlab Winrar
CVE-2025-6218-WinRAR-RCE-POC Com...
Exploit for Interpretation Conflict in Git-Scm Git
CVE-2025-48384 PoC This repository demons...
Exploit for Deserialization of Untrusted Data in Facebook React
React2Shell CVE-2025-55182 - Proof of Concept A comprehensi...
Exploit for Injection in Dlink Dns-320_Firmware
CVE-2024-10914POC PoC para explota...
CVE-2025-66482
creationtimestamp| type| source ---|---|--- 2025-12-13 10:32:43+00:00| published-proof-of-concept| https://github.com/misskey-dev/misskey/security/advisories/GHSA-wwrj-3hvj-prpm 2026-01-06 20:11:53+00:00| published-proof-of-concept| Telegram/mJFISOaG9sdliiq532xrtHTh4hR6RCcMc304VWQpxZ4gXns...
Exploit for Command Injection in Microsoft
CVE-2025-54100 - PowerShell Response Parsing PoC This reposit...
CVE-2025-43426
creationtimestamp| type| source ---|---|--- 2025-12-12 21:00:07+00:00| published-proof-of-concept| Telegram/z917lPoY4z2i6pdf0d-zy8JTrnC7jL9Rrjt0jECLqNamFjY 2026-07-21 07:00:05+00:00| seen| https://t.me/novnow/1294032 2026-07-21 07:00:05+00:00| seen| https://t.me/novnow/1294016 2026-07-22...
Exploit for CVE-2025-66478
React2Shell POC https://nextjs.org/blog/CVE-2025-66478 테스...