20916 matches found
CVE-2025-69207
creationtimestamp| type| source ---|---|--- 2026-02-01 20:24:31+00:00| published-proof-of-concept| https://github.com/khoj-ai/khoj/security/advisories/GHSA-6whj-7qmg-86qj...
Exploit for Unrestricted Upload of File with Dangerous Type in Gvectors Wpdiscuz
wpDiscuz-7.0.4-PoC-RCE - wpDiscuz 7.0.4 - Unauthenticated RCE...
Exploit for CVE-2026-25047
deephas = 1.0.8. References: - GitHub Advisory GHSA-2...
Exploit for CVE-2025-2304
c...
capstone-poc
Capstone Proof of Concept 1. Create the UI using the run fu...
TFM-POC-Dynamic-MEM-Windows
TFM...
CVE-2026-25499
creationtimestamp| type| source ---|---|--- 2026-01-31 17:32:06+00:00| published-proof-of-concept| https://github.com/bpg/terraform-provider-proxmox/security/advisories/GHSA-gwch-7m8v-7544...
Exploit for Code Injection in Apache Rocketmq
Apache RocketMQ NameServer 任意文件写入漏洞（CVE-2023-37582）漏洞复现POC，java版本 该poc为复现https://github.com/vulhub/vulhub/tree/master/rocketmq/CVE-2023-37582https://gitee.com/link?target=https%3A%2F%2Fgithub.com%...
EUVD-2020-30936
Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the 'Find Computer' feature that allows attackers to execute arbitrary code by overflowing the computer name input field. Attackers can craft a malicious payload that triggers a buffer overflow, enabling code executio...
CVE-2020-37042
Frigate Professional 3.36.0.9 contains a local buffer overflow in the Find Computer input field, enabling arbitrary code execution when a crafted payload overflows the computer name. In all connected sources, the vulnerability is demonstrated by launching the calculator as a proof of concept. The...
CVE-2020-37042
Frigate Professional 3.36.0.9 contains a local buffer overflow vulnerability in the 'Find Computer' feature that allows attackers to execute arbitrary code by overflowing the computer name input field. Attackers can craft a malicious payload that triggers a buffer overflow, enabling code executio...
nanshihui__PocCollect.e13e1379
PocCollect !Build Statushttp://nanshihui.github.io/public...
Exploit for CVE-2026-24102
This exploit for CVE-2026-24102 represents the pinnacle of the S...
📄 Microsoft Windows 11 build 10.0.27898.1000 Local Privilege Escalation
Proof of concept exploit designed to test a potential local privilege escalation vulnerability in Windows, specifically targeting a feature called AiRegistrySync. It checks if modifications made by a standard user in their own Registry profile can be automatically synchronized propagated into the...
deepHas vulnerable to Prototype Pollution via constructor.prototype
Summary A prototype pollution vulnerability exists in version 1.0.7 of the deephas npm package that allows an attacker to modify global object behavior. This issue was fixed in version 1.0.8. Details The vulnerability resides in the add function and indexer function implemented within deepHas.js...
Exploit for CVE-2026-24134
CVE-2026-24134-PoC Overview This repository contains the...
GHSA-VG9H-JX4V-CWX2 Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)
Summary The Unfurl web app enables Flask debug mode even when configuration sets debug = False. The config value is read as a string and passed directly to app.rundebug=..., so any non-empty string evaluates truthy. This leaves the Werkzeug debugger active by default. Details - unfurl/app.py:weba...