18522 matches found
Kyverno Denial of Service via Context Variable Amplification in Policy Engine
Summary Unbounded memory consumption in Kyverno's policy engine allows users with policy creation privileges to cause Denial of Serviceby crafting policies that exponentially amplify string data through context variables. Details For example, the random JMESPath function in...
Exploit for CVE-2025-56005
Ply 3.11 Exploit Rejection This project argues that CVE‑202...
pnpm scoped bin name Path Traversal allows arbitrary file creation outside node_modules/.bin
Summary A path traversal vulnerability in pnpm's bin linking allows malicious npm packages to create executable shims or symlinks outside of nodemodules/.bin. Bin names starting with @ bypass validation, and after scope normalization, path traversal sequences like ../../ remain intact. Details Th...
Exploit for Eval Injection in Xwiki
CVE-2025-24893- CVE-20...
Exploit for Out-of-bounds Read in Ntop Ndpi
CVE PoCs This repository provides PoC files, reproduction ste...
📄 Magento Adobe Commerce 2.4.6-p5 Arbitrary File Read
Magento Adobe Commerce version 2.4.6-p5 arbitrary file read proof of concept exploit. ============================================================================================================================================= | Title : Magento Adobe Commerce 2.4.6-p5 arbitrary file read...
dcap-qvl data falsification vulnerability
dcap-qvl is a confidential computing development library open source by Phala. Versions of dcap-qvl prior to 0.3.9 contained a data falsification vulnerability. This vulnerability stemmed from critical flaws in the encryption verification process, which could allow attackers to forge QE identity...
Exploit for SQL Injection in Internet-Formation Wp-Advanced-Search
CVE-20...
Exploit for CVE-2026-24061
CV...
MAL-2026-504 Malicious code in researchpoc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 20a5e6f7ec432b0c41646f696c530fb5e46e034477a23d448de1ac3f18172bec Package mentions being a research PoC, probably for dependency confusion, but the code is obfuscated making verification of the claim impossible. --- Category:...
Malicious code in researchpoc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 20a5e6f7ec432b0c41646f696c530fb5e46e034477a23d448de1ac3f18172bec Package mentions being a research PoC, probably for dependency confusion, but the code is obfuscated making verification of the claim impossible. --- Category:...
MAL-2026-502 Malicious code in test-poc-package-for-session (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9f768feb5a11add4d0ac64d8f24777461d3586e719a57d4432711ee6aae4f112 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...
EUVD-2026-4648
Malicious code in test-poc-package-for-session PyPI...
Exploit for Improper Input Validation in Intel Ethernet_Diagnostics_Driver_Iqvw32.Sys
iqvw64e-privilege-escalation CVE-2015-2291 Local Privilege Esc...
Exploit for CVE-2026-24061
CVE-2026-24061 – telnetd Authentication Bypass PoC !MIT Lice...
Exploit for CVE-2025-67303
exploit...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Imagemagick
CVE-2022-44268- For HTB practice...
OESA-2026-1213 opencc security update
Opencc is for between Traditional Chinese and Simplified Chinese characters and phrases conversion library. Security Fixes: A vulnerability was found in BYVoid OpenCC up to 1.1.9 and classified as critical. Using CWE to declare the problem leads to CWE-122. A heap overflow condition is a buffer...