CVE-2026-113706

A vulnerability was identified in a2aproject a2a-rs up to 0.4.3. Impacted is an unknown function of the file a2a-server/src/taskstore/inmemory.rs. The manipulation of the argument historyLength leads to information disclosure. The attack is possible to be carried out remotely. The identifier of t...

CVE-2024-51567-RCE-EXPLOIT

CVE-2024-51567-RCE-EXPLOIT cbyerpanel rce exploit...

CVE-2022-36804-PoC

CVE-2022-36804-PoC Multithreaded exploit script for CVE-2022-36804 affecting most BitBucket versions 8.3.1 See the full advisory here https://jira.atlassian.com/browse/BSERV-13438 All credit to TheGrandPew for discovery The script will automatically detect public repositories located on bitbucket...

CVE-2021-26295

CVE-2021-26295-POC Vulnerability verification for CVE-2021-26295 using DNSlog. Usage poc: Place the target in target.txt and run python poc.py. JDK environment must be 12, otherwise ysoserial cannot generate the payload properly exp: python exp.py https://baidu.com then enter the command executio...

CVE-2018-11776

CVE-2018-11776 Proof of Concept exploit so I could quickly assess what sorts of protections and fixes are available. Originally found by Man Yue Mo, Semmle: https://semmle.com/news/apache-struts-CVE-2018-11776 Semmle had a "Apache Struts RCE - CVE-2018-11776 - PoC Exploit Demo" YouTube video up f...

CVE-2026-113737 R6410418 Jackrong-llm-finetuning-guide qwen_mtp_gguf_pipeline.py validate_indexed_tensors path traversal

A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This affects the function validateindexedtensors of the file qwen-mtp-gguf/scripts/qwenmtpggufpipeline.py. Executing a manipulation of the argument weightmap can lead to path traversal...

EUVD-2026-106989

A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This affects the function validateindexedtensors of the file qwen-mtp-gguf/scripts/qwenmtpggufpipeline.py. Executing a manipulation of the argument weightmap can lead to path traversal...

CVE-2026-113737

A path traversal vulnerability exists in R6410418 Jackrong-llm-finetuning-guide (up to commit ef2b17f2798cd18cd85375080c35a58397ad0d09). The flaw is located within the validate_indexed_tensors function of the qwen-mtp-gguf/scripts/qwen_mtp_gguf_pipeline.py file. An attacker can perform a remote a...

CVE-2018-8495-POC

CVE-2018-8495 POC Simple poc of CVE-2018-8495 Microsoft Edge Remote Code Execution saurce : https://leucosite.com/Microsoft-Edge-RCE/...

CVE-2020-8958

CVE-2020-8958 CVE-2020-8958 : Authenticated Remote Code Execution Exploit for NetLink Routers using boa server. CVSS Score: 7.2 Vulnerability Types: OS Command Injection Authentication: Required Affected Models: HG323 Description The /boaform/admin/formPing resource in Netlink routers allows remo...

CVE-2025-7340

🚨 HT Contact Form Widget = 2.2.1 - Unauthenticated Arbitrary File Upload CVE-2025-7340 CVE: CVE-2025-7340 CVSS: 9.8 Critical 📝 Description The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. plugin for WordPress is vulnerable to arbitrary file uploads due to...

React-Server-Components-Remote-Code-Execution-CVE-2025-55182-

This repository does not have a README...

o3_finds_cve-2025-37899

based on How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation target vuln ollama vuln CVE-2024-37032 https://github.com/ollama/ollama/releases/tag/v0.1.34 https://github.com/ollama/ollama/compare/v0.1.33...v0.1.34 commit: 2a21363 by using l...

CVE-2026-113205

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from a use-after-free memory management error in the Variations component...

CVE-2026-113229

A flaw was found in the Loader component of chromium-browser. A remote attacker can exploit a use-after-free memory vulnerability by enticing a user to open a specially crafted HTML page. Successful exploitation allows an attacker to execute arbitrary code within the browser sandbox environment...

CVE-2026-113191

A flaw was found in chromium-browser. A use-after-free vulnerability in the Internals component allows a remote attacker to execute arbitrary code inside the browser sandbox. By tricking a user into visiting a specially crafted HTML page, an attacker can trigger memory corruption to compromise th...

CVE-2026-113187

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the browser sandbox by convincing a user to view a specially crafted HTML page. The issue is caused by a use-after-free memory error within the Document Object Model DOM component...

CVE-2026-113179

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the browser sandbox by convincing a user to open a specially crafted HTML page. This issue is caused by a use-after-free memory error in the Paint component...

CVE-2026-113208

A flaw was found in the ContextualSearch component of Chromium. A remote attacker could exploit this use-after-free vulnerability by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code inside the browser sandbox...

CVE-2026-113177

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by tricking a user into visiting a specially crafted HTML page. The vulnerability is caused by a use-after-free condition in the FileSystem component, where memory is...