MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion

Summary Nested imports of MaterialX files can lead to a crash via stack memory exhaustion, due to the lack of a limit on the "import chain" depth. Details The MaterialX specification supports importing other files by using XInclude tags. When parsing file imports, recursion is used to process...

CVE-2025-53012

creationtimestamp| type| source ---|---|--- 2025-07-31 15:42:08+00:00| published-proof-of-concept| https://github.com/AcademySoftwareFoundation/MaterialX/security/advisories/GHSA-qc2h-74x3-4v3w...

CVE-2025-53011

creationtimestamp| type| source ---|---|--- 2025-07-31 15:41:50+00:00| published-proof-of-concept| https://github.com/AcademySoftwareFoundation/MaterialX/security/advisories/GHSA-7qw8-3vmf-gj32...

CVE-2025-53010

creationtimestamp| type| source ---|---|--- 2025-07-31 15:41:12+00:00| published-proof-of-concept| https://github.com/AcademySoftwareFoundation/MaterialX/security/advisories/GHSA-3jhf-gxhr-q4cx...

Exploit for Improper Access Control in Joomla Joomla\!

PoCs This repo contains proof of concept exploits for vulnera...

CVE-2025-41419

creationtimestamp| type| source ---|---|--- 2025-07-31 06:16:31+00:00| published-proof-of-concept| https://github.com/modelscope/ms-swift/security/advisories/GHSA-7c78-rm87-5673...

CVE-2025-54586

creationtimestamp| type| source ---|---|--- 2025-07-30 15:27:15+00:00| published-proof-of-concept| https://github.com/finos/git-proxy/security/advisories/GHSA-v98g-8rqx-g93g...

CVE-2025-50460

creationtimestamp| type| source ---|---|--- 2025-07-30 03:05:19+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/45882 2025-07-30 15:00:07+00:00| published-proof-of-concept| Telegram/C5Uti98yNMibrytNOYJF3eWZ7TSU5JhC3eF6W16WxddRY4 2025-07-31 06:07:06+00:00| published-proof-of-concept|...

Concrete Security Bounds for Simulation-Based Proofs of Multi-Party Computation Protocols

The concrete security paradigm aims to give precise bounds on the probability that an adversary can subvert a cryptographic mechanism. This is in contrast to asymptotic security, where the probability of subversion may be eventually small, but large enough in practice to be insecure. Fully...

CVE-2001-1473

creationtimestamp| type| source ---|---|--- 2025-07-29 21:00:04+00:00| published-proof-of-concept| Telegram/ujDzFFrET3ZH5xQdQMIqDWCAd6Ask0YbS48UdaKK1nCHgf0...

GHSA-JGMV-J7WW-JX2X Koa Open Redirect via Referrer Header (User-Controlled)

Summary In the latest version of Koa, the back method used for redirect operations adopts an insecure implementation, which uses the user-controllable referrer header as the redirect target. Details on the API document https://www.koajs.net/api/responseresponseredirecturl-alt, we can see:...

CVE-2025-50866

creationtimestamp| type| source ---|---|--- 2025-07-28 21:00:05+00:00| published-proof-of-concept| Telegram/yClP7ID2sv33ZU8LKP82OuDHMHI-3r8bUmurim2SHQMJTmY...

GHSA-VR59-GM53-V7CQ

creationtimestamp| type| source ---|---|--- 2025-07-28 20:53:07+00:00| published-proof-of-concept| https://t.me/cybersecplayground/274...

Exploit for CVE-2025-8191

CVE-2025-8191 – Swagger UI XSS Injection Description :...

CVE-2025-54590

creationtimestamp| type| source ---|---|--- 2025-07-27 17:38:06+00:00| published-proof-of-concept| https://github.com/silverbucket/webfinger.js/security/advisories/GHSA-8xq3-w9fx-74rv...

MS17-010

This repository is for public analysis of the MS17-010 vulnerability. The repository contains various PoCs Proof of Concept and exploits for the vulnerability, which affects the Windows SMB protocol. The vulnerability is a buffer overflow in the SMB protocol, allowing an attacker to execute...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

CVE-2020-0796 PoC aka CoronaBlue aka SMBGhost Usage ./CVE-2020-0796.py servername This script connects to the target host, and compresses the authentication request with a bad offset field set in the transformation header, causing the decompressor to buffer overflow and crash the target. This...

Exploit for OS Command Injection in Gnu Bash

Exploits Miscellaneous proof of concept exploit code written at Xiphos Research for testing purposes. Current Exploits index may be out of date phpMoAdmin Remote Code Execution CVE-2015-2208 LotusCMS Remote Code Execution OSVDB-75095 ElasticSearch Remote Code Execution CVE-2015-1427 ShellShock...

IOHIDeous

IOHIDeous A macOS kernel exploit based on an IOHIDFamily 0day. Write-up here. Notice The prefetch timing attack I'm using for hid for some reason doesn't work on High Sierra 10.13.2 anymore, and I don't feel like investigating that. Maybe patched, maybe just the consequence of a random change, I...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android

This repository contains a PoC Proof of Concept code for the BlueBorne vulnerabilities. The BlueBorne vulnerabilities are a set of vulnerabilities in Bluetooth devices that allow an attacker to remotely execute code on a device. The PoC code is written in Python and uses the PyBluez library to...