CVE-2026-108361

The Privasys Remote Attestation TLS Clients (specifically Privasys/ra-tls-clients ) is vulnerable to a Time-of-Check Time-of-Use (TOCTOU) race condition in versions before 0.9.1 . An attacker with local access can modify workload code, data, and configuration at runtime after a successful connect...

CVE-2026-108361 Privasys Intra-handshake attested TLS implementation is vulnerable to TOCTOU Attacks

Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Before 0.9.1, an attacker with local access could modify workload code, data, and configuration at any time after successful connection establishment. Once Evidence was successfully...

CVE-2026-108362 Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)

Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.11.0, TEE attestation evidence in Privasys attested TLS is accepted without requiring an explicitly authorized platform identity. When a network attacker can forge evidence...

CVE-2026-108362 Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)

Privasys Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.11.0, TEE attestation evidence in Privasys attested TLS is accepted without requiring an explicitly authorized platform identity. When a network attacker can forge evidence...

CVE-2026-108362

Privasys Remote Attestation TLS Clients versions prior to 0.11.0 are vulnerable to a diversion attack due to an Origin Validation Error (CWE-346). The software fails to require an explicitly authorized platform identity, meaning it accepts TEE attestation evidence from any unrevoked platform. A n...

CVE-2026-69212

CVE-2025-69212 — OpenSTAManager OS Command Injection RCE Proof-of-concept exploit for CVE-2025-69212 , an OS Command Injection vulnerability in OpenSTAManager ;echo ".p7m Resulting shell execution: openssl smime ... -in "invoice.p7m";;echo ".p7m" ... ^^^^^^^^^^^^ injected here Note: The forward...

CVE-2005-0575-knet-exploit

CVE-2005-0575 KNet Web Server 1.04b Remote Buffer Overflow SEH Exploit for x86 Windows XP SP3, this exploit needs some adjustment ! edit the code before run ! made in the past, I forgot when I made it...

CVE-2022-25765

CVE-2022-25765 PoC for Blind RCE for CVE-2022-25765 Tested in HTB - Precious Machine...

firefox: thunderbird: Mitigation bypass in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Remote Settings Client component...

firefox: thunderbird: Mitigation bypass in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Remote Settings Client component...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

firefox: thunderbird: Mitigation bypass in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Remote Settings Client component...

CVE-2026-48908-PoC

CVE-2026-48908 — SP Page Builder Joomla Unauthenticated RCE Proof-of-concept exploit for CVE-2026-48908 , a critical CVSS 4.0 = 10.0 unauthenticated remote-code-execution vulnerability in the SP Page Builder component comsppagebuilder for Joomla, by JoomShaper. | ---|--- CVE| CVE-2026-48908...

EUVD-2026-97780

A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affected is the function getimagesize of the file uploadsave.php. Executing a manipulation of the argument uploadedfile/image can lead to unrestricted upload. The attack may be launche...

CVE-2026-108922

A flaw in the KusalkaSilva Learning-Management-System (up to commit ffeb873f8803f1e9664384ff75000c7da45466d2 ) allows for unrestricted upload of files. The vulnerability exists in the getimagesize function of the upload_save.php file, where a manipulation of the uploaded_file/image argument can b...

CVE-2026-108922 KusalkaSilva Learning-Management-System upload_save.php getimagesize unrestricted upload

A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affected is the function getimagesize of the file uploadsave.php. Executing a manipulation of the argument uploadedfile/image can lead to unrestricted upload. The attack may be launche...

CVE-2026-108922 KusalkaSilva Learning-Management-System upload_save.php getimagesize unrestricted upload

A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. Affected is the function getimagesize of the file uploadsave.php. Executing a manipulation of the argument uploadedfile/image can lead to unrestricted upload. The attack may be launche...

CVE-2026-33937

CVE-2026-33937 — Handlebars.js AST Injection RCE Handlebars.js versions 4.0.0 through 4.7.8 are affected. CVSS score: 9.8 Critical. Overview CVE-2026-33937 is a type confusion vulnerability in Handlebars.js. The Handlebars.compile function accepts both a template string and a pre-parsed AST objec...

ApacheStruts-CVE-2018-11776

Apache Struts CVE-2018-11776 Python PoC This is based on https://github.com/hook-s3c/CVE-2018-11776-Python-PoC. The container build and instructions did not work as described in the README so this fork was created. The POC exploit used is from Rapid7. Shoutout: hook-s3c github.com/hook-s3c,...

mcpjam-cve-2026-23744-validator

MCPJam Inspector Authorized Security Validator A bounded proof-of-concept validator for CVE-2026-23744 affecting vulnerable MCPJam Inspector deployments. This project is an independent, non-destructive validation tool for the previously disclosed CVE-2026-23744. It is not the original vulnerabili...