20122 matches found
PT-2025-48044
Name of the Vulnerable Software and Affected Versions CGGMP24 versions prior to 0.6.3 CGGMP24 version 0.6.3 CGGMP24 versions 0.6.3 through 0.7.0-alpha.2 Description A missing check in the ZK proof allows a single malicious signer to reconstruct the full private key. The issue was addressed with a...
Exploit for Injection in Oracle Agile_Plm
Auto-WebLogicScanner An automated WebLogic vulnerability dete...
Exploit for Use of Uninitialized Resource in Microsoft
Proof-of-Concept exploit for the Untrusted Pointer Dereferenc...
websocket-server-vuln-poc
websocket-server 0.6.4 ā Input Validation Vulnerability PoC...
Exploit for CVE-2025-63406
CVE-2025-63406 ā Security Research Proof-of-Concept PoC Thi...
CRLF-Base64-Injection
š„ CRLF + Base64 Injection Proof of Concept Author: Subir...
@hpke/core reuses AEAD nonces
Summary The public SenderContext Seal API has a race condition which allows for the same AEAD nonce to be re-used for multiple Seal calls. This can lead to complete loss of Confidentiality and Integrity of the produced messages. Details The SenderContext Seal implementation allows for concurrent...
CVE-2025-7892
creationtimestamp| type| source ---|---|--- 2025-11-20 16:16:22+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60310 2025-11-20 21:00:05+00:00| published-proof-of-concept| Telegram/nY5-0lCVx8RKsRPrkDgSLkXo8AbHt3usOoKy9LAJ3yK8Xw...
Exploit for Improper Handling of Length Parameter Inconsistency in Nvidia Cuda_Toolkit
CVE-2025-23247 Epic Collab with @reubensammut : as alaways :...
Exploit for CVE-2025-63499
CVE-2...
CVE-2025-63914
creationtimestamp| type| source ---|---|--- 2025-11-20 02:11:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60236 2025-11-20 09:00:14+00:00| published-proof-of-concept| Telegram/GmvoRp-ZTeQCHWxtyW7HXEFoLo07FBSobpKiaRjeTfDZGXg...
mpdf-pocs
mPDF 8.2.6 PoCs Referenced by: - https:/...
Exploit for Integer Overflow or Wraparound in Microsoft
CVE-2025-54110-Kernel-EoP-PoC PoC implementation for CVE-2025-...
Exploit for Improper Authentication in Fortinet Fortiproxy
CVE-2022-40684 CVE-2022-40684 - Auth bypass extract admin u...
CVE-2025-25255
creationtimestamp| type| source ---|---|--- 2025-11-19 07:52:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60161 2025-11-19 12:50:02+00:00| published-proof-of-concept| https://github.com/watchtowrlabs/watchTowr-vs-Fortiweb-AuthBypass/blob/main/watchTowr-vs-Fortiweb-AuthBypass.p...
XSS-
It is an offensive tool for web application security testing. Th...
Exploit for CVE-2025-63406
CVE-2025-63406 PoC Installation bash Install depende...
XWiki view file macro: User can view content of office file without view rights on the attachment
Summary A user with no view rights on a page may see the content of an office attachment displayed with the view file macro. Details If on a public page is displayed an office attachment from a restricted page, a user with no view rights on the restricted page can view the attachment content, no...