AZL-106845 CVE-2026-107302 affecting package msgpack 3.3.0-1

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte length of a map32 value before validating that the complete five-byte header is available. A truncated map32 header therefore causes a checked out-of-bounds buffer read and throws...

CVE-2026-107302

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte length of a map32 value before validating that the complete five-byte header is available. A truncated map32 header therefore causes a checked out-of-bounds buffer read and throws...

Samba-CVE-2021-44142

CVE-2021-44142 Vulnerability Checker A tool to check if a Samba server is vulnerable to CVE-2021-44142 Background CVE-2021-44142 is a heap out-of-bounds read and write in Samba's vfsfruit module used at Pwn2Own Austin 2021 against the Western Digital PR4100. It was first discovered by Nguyễn Hoàn...

dirty-frag-check

Dirty Frag check CVE-2026-43284 / CVE-2026-43500 Read-only checker for the "Dirty Frag" Linux kernel local-root vulns CVE-2026-43284, CVE-2026-43500. Checks kernel version, module state, KernelCare livepatch, and any modprobe blacklist you've added. Doesn't run exploit code. Companion to...

dirty-frag-check

Controllo Dirty Frag CVE-2026-43284 / CVE-2026-43500 Checker in sola lettura per le vulnerabilità local-root "Dirty Frag" del kernel Linux CVE-2026-43284, CVE-2026-43500. Verifica la versione del kernel, lo stato dei moduli, il livepatch KernelCare e qualsiasi blacklist di modprobe che hai...

CVE-2026-33725

CVE-2026-33725 A proof-of-concept exploit for CVE-2026-33725, a Remote Code Execution and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import in Metabase. Vulnerable Versions Metabase Enterprise ≥ v1.47 and v1.54.22 Metabase Enterprise ≥ v1.54.0 and v1.54.22 Metabase...

CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC

🔓 CVE-2026-3055 - Citrix NetScaler Memory Overread Exploit ⚠️ WARNING This tool is for educational purposes and authorized testing only. Do not use on systems without explicit permission. 📋 Description Exploit for CVE-2026-3055 - out-of-bounds read memory overread vulnerability in NetScaler ADC an...

CVE-2021-1965

uses libwifi just for fun...

CVE-2025-46819

CVE-2025-46819 – Redis Lua Long-String Delimiter Out-of-Bounds Read Malformed long-string delimiter causing Lua lexer OOBs read on Redis 8.2.1. Overview Lua's long-string parser in Redis 8.2.1 mishandles malformed =... sequences, returning sentinel values that lead to buffer underflows or excessi...

CVE-2025-7771

A exploit app written in Rust for CVE-2025-7771 At a glance of the source code data.rs, store the vulnerable driver binary as a static array exploit.rs, implement a arbitrary read/write primitives based on that vulnerable drvier filemap.rs, a simple wrapper for win32 file mapping ops nt.rs, some ...

Heartbleed-PoC-Exploit-Script

Heartbleed-PoC-Exploit-Script Este script de prueba de concepto PoC en Python detecta la vulnerabilidad Heartbleed CVE-2014-0160 realizando un handshake TLS con la extensión heartbeat y enviando una solicitud heartbeat manipulada. Analiza las respuestas del servidor para identificar memoria...

CVE-2026-34197

CVE-2026-34197 ActiveMQ Classic Security Detection Tool This is an Apache ActiveMQ Classic exposure detection tool for defense and internal network reconnaissance, used to assist in assessing risks related to CVE-2026-34197. This project does not contain exploit code, does not execute Jolokia exe...

zenml-CVE-2024-2083-POC

CVE-2024-2083 – ZenML Arbitrary File Read PoC This repository demonstrates how to reproduce CVE-2024-2083 , an Arbitrary File Read vulnerability in ZenML. The issue allows an attacker to read files from the server filesystem by abusing the logs.uri field in the /api/v1/steps API request. By...

osTicketFileReadIntoRCE

CVE-2026-22200: osTicket Arbitrary File Read to RCE Full-chain exploit combining PHP filter chain injection with CVE-2024-2961 CNEXT for unauthenticated Remote Code Execution on vulnerable osTicket installations. Table of Contents Overview Vulnerability Details Attack Flow Features Installation...

CVE-2026-93861

In OpenStack Mistral through 23.0.0, the workflow membership API lets a project that has accepted a share of another project's private workflow create a further membership naming a third project. The new membership row is created with its projectid defaulted to the accepting project rather than t...

CVE-2026-7020

CVE-2026-7020 Ollama arbitrary file read via tensor digest path traversal. Exfiltrates SSH host keys and any other file from a reachable Ollama host in three unauthenticated API calls. Writeup: Co-Researcher @gouldnicholas Usage python3 poc.py Tries all three SSH host key types with known sizes a...

Ni8mare

🔒 Ni8mare Scanner Ethical Security Scanner for CVE-2026-21858 Ni8mare Vulnerability "Knowledge is power, but only if shared responsibly." Comprehensive vulnerability detection tool for n8n workflow automation instances. Detects the critical CVE-2026-21858 vulnerability CVSS 10.0 without performin...

CVE-2026-34036

CVE-2026-34036 Proof-of-concept script for CVE-2026-34036 , an authenticated local file inclusion / LFI in Dolibarr. The issue is reachable through core/ajax/selectobject.php. An authenticated user can abuse the objectdesc parameter to make the application read arbitrary local files on the server...

CVE-2021-41277

CVE-2021-41277 MetaBase Arbitrary File Read A small script I wrote myself; it's not well written, so please feel free to point out any issues. Disclaimer : The techniques provided are for learning and reference testing only. Any direct or indirect losses caused by using the information provided i...

CVE-2026-27831-POC

CVE-2026-27831-POC Poc Exploit for CVE-2026-27831 This is proof of concept exploit for remote heap based out-of-bound read at rldns version 1.3 that causes denial of service. rldns is an open source DNS server for linux, freebsd & netbsd, running on x8664 architecture. Rldns Version 1.3 has a...