CVE-2021-33026

CVE-2021-33026 Pickle Serialization Remote Code Execution - Memcached Poisoning PoC Exploit What's CVE-2021-3306? "The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains...

CVE-2022-33891

CVE-2022-33891 - Apache Spark Command Injection Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author AkbarTrilaksana Description The Apache Spark UI offers the possibility to enable ACLs via the...

EUVD-2026-104387

A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...

CVE-2026-112150 vraj404 Criminal-Management-System search.php sql injection

A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...

CVE-2026-112150 vraj404 Criminal-Management-System search.php sql injection

A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected is an unknown function of the file search.php. The manipulation of the argument Search results in sql injection. The attack can be executed remotely. The exploit has...

CVE-2026-112150

The vraj404 Criminal-Management-System (up to commit 2808d057e7ddc5295519a487365b0cacfd0ba8c4 ) is vulnerable to a remote SQL injection flaw. The vulnerability exists within an unknown function of the search.php file, where manipulating the Search argument allows an attacker to execute arbitrary ...

CVE-2017-16994

/ disablemapminadd.c / / / include include include include include include include / offsets might differ, kernel was custom compiled you can read vmlinux and caculate the offset when testing / / define OFFSETKERNELBASE 0x000000 / define MMAPMINADDR 0x1101de8 define DACMMAPMINADDR 0xe8e810 / get...

RustChain

Description This tool is a simple PoC of how to hide memory artifacts using a ROP chain in combination with hardware breakpoints. The ROP chain will change the main module memory page's protections to N/A while sleeping i.e. when the function Sleep is called. For more detailed information about...

EUVD-2026-104385

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function moveuploadedfile of the file home.php. The manipulation of the argument myimg leads to unrestricted upload. Remote exploitation of the attack is possible...

CVE-2026-112149 vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function moveuploadedfile of the file home.php. The manipulation of the argument myimg leads to unrestricted upload. Remote exploitation of the attack is possible...

CVE-2026-112149 vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function moveuploadedfile of the file home.php. The manipulation of the argument myimg leads to unrestricted upload. Remote exploitation of the attack is possible...

CVE-2026-112149 vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload

A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. This impacts the function moveuploadedfile of the file home.php. The manipulation of the argument myimg leads to unrestricted upload. Remote exploitation of the attack is possible...

CVE-2026-112149

The vraj404 Criminal-Management-System (up to commit 2808d057e7ddc5295519a487365b0cacfd0ba8c4 ) contains an unrestricted file upload vulnerability within the home.php file. The flaw exists in the move_uploaded_file function, where manipulating the my_img argument allows for unauthorized file uplo...

CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Remote Code Execution Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the...

bitpixie

bitpixie Full blog post here Main References syss blog post Syss's Github repository Bitpixie BitLocker Exploit Implementation Virtual machine reproduction. The local machine attacker machine uses Ubuntu 22.04.5 LTS system, while the victim machines are Windows 10 21H2 19041.1 and Windows 11 21H2...

Prineo_RE

About PriPara internal name Prineo is an arcade rythm game developed by SynSophia. Goal The goal of this project was to reverse the model format of the arcade series in order to port exclusive characters to the newer version of the game on Nintendo Switch. Screenshots Some interesting screenshots...

exim-rce-cve-2018-6789

Exim RCE CVE-2018-6789 Learning Environment Description This is a set of files, scripts, notes, ... to set up an environment to investigate the Exim RCE CVE-2018-6789. It can be used to debug Exim, write exploits, trace Exim function calls, learn about Exim's custom memory management storeblocks,...

CVE-2025-47550

Instantio - Wordpress Plugin 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0: mtu...

CVE-2026-112145

A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the function PyannoteDiarizationModelManager.loadfn of the file src/speaches/executors/pyannotediarization.py of the component Pyannote Diarization Model Loading. The manipulation of th...

Security Bulletin: Worksoft Connective Automation Platform for IBM is affected by a vulnerability in MessagePack

Summary MessagePack is used by Worksoft Connective Automation Platform for IBM as part of .Net6 CVE-2024-48924 Vulnerability Details CVEID:CVE-2024-48924 DESCRIPTION: Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a denial of service...