CVE-2026-112297

A server-side request forgery (SSRF) vulnerability exists in ptbsare anx-calibre-manager versions up to 1.13.12 . The flaw is located within the LLM Configuration Handler component, specifically in the LLMClient.chat function of the file blueprints/api/llm.py. An attacker can remotely initiate th...

rats-re

Rats! source reconstruction with local LLMs This repository is a work-in-progress reconstruction of the source code for RATS.EXE, the original Windows version of Rats! 1994 by Sean O'Connor. It builds a Win32 executable with Microsoft Visual C++ 4.1 under wibo and can be tested in DREAMM. The...

CVE-2024-7135

CVE-2024-7135 The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getfile' function in all versions up to, and including, 0.21.7. The function is also vulnerable to directory traversal. This makes it possible for authenticated...

CVE-2024-10571

CVE-2024-10571 Chartify – WordPress Chart Plugin = 2.9.5 - Unauthenticated Local File Inclusion via source Description The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This make...

CVE-2023-5070

CVE-2023-5070 Social Media Share Buttons & Social Sharing Icons = 2.8.5 - Information Exposure Description: The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.8.5 via the sfsisaveexport...

CVE-2026-82166

Dell Application Store versions prior to 26.05.0.7 are vulnerable to a Missing Authentication for Critical Function vulnerability (CWE-306). An unauthenticated attacker with adjacent network access can exploit this flaw to achieve arbitrary code execution . No specific exploit details or in-the-w...

CVE-2026-82166

Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution...

EUVD-2026-104592

Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution...

CVE-2026-41096-POC

the bug is at DnsQueryRaw function to be specific, inside DnsRawTruncateMessageForUdp so you need a program to call it. I could be wrong, but currently there isnt a service or default program in windows 11 that use this function, thats why i needed client.c. this repo has 2 files, client.c and...

CVE-2026-6307

CVE-2026-6307: V8 JS-to-Wasm type confusion → RCE on Chrome 146 Local reproduction and weaponization of the V8 JS-to-Wasm deoptimization type confusion described by Nebula, taken to a xcalc popped from the renderer of Chrome for Testing 146.0.7680.165 the bug is fixed in 147.0.7727.101. All...

NTDLL-reconstruction

NTDLL-reconstruction A userland EDR bypass technique that allows you to flip between unhooked and hooked ntdll.dll at will. How I built this can be found here. Usage You can just drag and drop the .h and .c file into your project make sure you edit the header file definition for CRT functions tha...

CVE-2026-112254 agit8or1 clientst0r Property URL Importer property_url_importer.py _fetch_html server-side request forgery

A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function fetchhtml of the file locations/services/propertyurlimporter.py of the component Property URL Importer. The manipulation of the argument url results in server-side request forgery. The...

CVE-2026-112254

A server-side request forgery (SSRF) vulnerability exists in agit8or1 clientst0r up to version 3.17.586 . The flaw is located in the _fetch_html function within the Property URL Importer component (file: locations/services/property_url_importer.py). By manipulating the url argument, an attacker c...

CVE-2026-112254 agit8or1 clientst0r Property URL Importer property_url_importer.py _fetch_html server-side request forgery

A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function fetchhtml of the file locations/services/propertyurlimporter.py of the component Property URL Importer. The manipulation of the argument url results in server-side request forgery. The...

EUVD-2026-104590

A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function fetchhtml of the file locations/services/propertyurlimporter.py of the component Property URL Importer. The manipulation of the argument url results in server-side request forgery. The...

CVE-2026-112254 agit8or1 clientst0r Property URL Importer property_url_importer.py _fetch_html server-side request forgery

A vulnerability was found in agit8or1 clientst0r up to 3.17.586. Affected by this vulnerability is the function fetchhtml of the file locations/services/propertyurlimporter.py of the component Property URL Importer. The manipulation of the argument url results in server-side request forgery. The...

1Panel-CVE-2025-54424-

CVE-2025-54424 CVE-2025-54424：1Panel Client Certificate Bypass RCE Vulnerability All-in-One Tool Scan + Exploit Vulnerability Overview 1Panel is an open-source, modern Linux operation and maintenance panel that provides a graphical interface for deploying websites, managing servers, and running...

CVE-2025-8061-Exploit

CVE-2025-8061 Exploit Overview Proof-of-Concept exploit for LnvMSRIO.sys Lenovo MSR I/O Driver, demonstrating arbitrary physical memory read/write and kernel memory access via Superfetch VA-to-PA translation. Driver Information Property| Value ---|--- Driver Name| LnvMSRIO.sys Device Name|...

CVE-2025-52290

A flaw was found in ffmpeg. An attacker could exploit this vulnerability by providing a crafted media file to be processed by the application. This issue triggers a NULL pointer dereference in the avprivh264hasnumreorderframes function, leading to an unexpected application crash and resulting in ...

tvm-recover

tvm-recover Related Zenodo record: 10.5281/zenodo.23474767. ⚠️ Disclaimer: This project is intended strictly for authorized security research, interoperability analysis, and education. It does not include or provide any bypass functionality for commercial anti-cheat systems. Users are solely...