Exploit for Out-of-bounds Write in Gnu Glibc

CTT-Vsyslog-Vortex-CVE-2023-6246 CVE-2023-6246 glibc vsyslog...

CVE-2025-15608

This vulnerability in AX53 v1 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes the affected service to crash and, under specific conditions, may enable remote code execution throug...

CVE-2025-15608 Buffer Overflow in Network Probe Handling Function of TP-Link Archer AX53 + Archer AX55

This vulnerability in AX53 v1, AX55 v4 and AX55 v4.6 results from insufficient input sanitization in the device’s probe handling logic, where unvalidated parameters can trigger a stack-based buffer overflow that causes the affected service to crash and, under specific conditions, may enable remot...

📄 Samsung Quram DNG TrimBounds Out-Of-Bounds Read

A vulnerability exists in the image decoding logic of Quram DNG parser within libimagecodec.quram.so. The flawed bounds validation in handling TrimBounds opcode triggers out-of-bounds reads on heap-allocated image buffers. This issue allows remote attackers to craft a malicious DNG payload, embed...

php_loose_comparison.txt

Initial Access — Foothold as www-data Vulnerability S...

Exploit for Off-by-one Error in Sudo_Project Sudo

ExploitForge - AI-Powered Automatic Exploit Generation !Pyt...

Exploit for Double Free in Microsoft

CVE-2025-62215 Exploit PoC Original code credit: https://gith...

EUVD-2018-0769

Malware in sbrugna...

EUVD-2018-0748

Malware in sbrugna...

EUVD-2015-6523

Malware in sbrugna...

EUVD-2017-14504

Malware in sbrugna...

EUVD-2023-0196

Malicious code in bioql PyPI...

MAL-2025-36319 Malicious code in test-mlw2-spray-merks (npm)

The package test-mlw2-spray-merks was found to contain malicious code...

MAL-2025-36320 Malicious code in test-mlw2-spray-sized (npm)

The package test-mlw2-spray-sized was found to contain malicious code...

Malicious code in test-mlw2-spray-merks (npm)

The package test-mlw2-spray-merks was found to contain malicious code...

Malicious code in test-mlw2-spray-sized (npm)

The package test-mlw2-spray-sized was found to contain malicious code...

CVE-2023-41885

Piccolo is an ORM and query builder which supports asyncio. In versions 0.120.0 and prior, the implementation of BaseUser.login leaks enough information to a malicious user such that they would be able to successfully generate a list of valid users on the platform. As Piccolo on its own does not...

CVE-2020-5799

The Eat Spray Love mobile app for both iOS and Android contains a backdoor account that, when modified, allowed privileged access to restricted functionality and to other users' data...

📄 Ivanti Connect Secure 22.7R2.5 Remote Code Execution

This Metasploit module exploits a stack-based buffer overflow vulnerability in Ivanti Connect Secure to achieve remote code execution CVE-2025-22457. Versions 22.7R2.5 and earlier are vulnerable. Note that Ivanti Pulse Connect Secure, Ivanti Policy Secure and ZTA gateways are also vulnerable but...

Password Spray Attacks Taking Advantage of Lax MFA

In the first quarter of 2025, Rapid7’s Managed Threat Hunting team observed a significant volume of brute-force password attempts leveraging FastHTTP, a high-performance HTTP server and client library for Go, to automate unauthorized logins via HTTP requests. This rapid volume of credential...