EUVD-2026-104321

A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the function PyannoteDiarizationModelManager.loadfn of the file src/speaches/executors/pyannotediarization.py of the component Pyannote Diarization Model Loading. The manipulation of th...

CVE-2026-112145 speaches-ai speaches Pyannote Diarization Model Loading pyannote_diarization.py PyannoteDiarizationModelManager._load_fn externally-controlled input to select classes or code

A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the function PyannoteDiarizationModelManager.loadfn of the file src/speaches/executors/pyannotediarization.py of the component Pyannote Diarization Model Loading. The manipulation of th...

CVE-2026-112145 speaches-ai speaches Pyannote Diarization Model Loading pyannote_diarization.py PyannoteDiarizationModelManager._load_fn externally-controlled input to select classes or code

A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affects the function PyannoteDiarizationModelManager.loadfn of the file src/speaches/executors/pyannotediarization.py of the component Pyannote Diarization Model Loading. The manipulation of th...

CVE-2024-24919-PoC

CVE-2024-24919-PoC Vulnerability References https://nvd.nist.gov/vuln/detail/CVE-2024-24919 https://censys.com/cve-2024-24919/ https://vulners.com/cve/CVE-2024-24919 https://support.checkpoint.com/results/sk/sk182336 Hotfix About CVE-2024-24919 The vulnerability allows an unauthenticated remote...

clawguard

🦞 ClawGuard v3 Enterprise AI Agent Security Toolkit - SKILL.md Driven Active Defense Core Concept The core defense of ClawGuard v3 is not in the code, but in SKILL.md! Each module's SKILL.md itself is a complete defense guide: Tells the Agent when to trigger Guides the Agent how to detect Provide...

CVE-2023-4278

CVE-2023-4278 Exploit Title: Wordpress Plugin Masterstudy LMS = 3.0.17 - Unauthenticated Instructor Account Creation Google Dork: inurl:/user-public-account Vendor Homepage: https://wordpress.org/plugins/masterstudy-lms-learning-management-system/ Software Link: https://stylemixthemes.com Version...

mongobleed-scanner

MongoBleed CVE-2025-14847 MongoBleed is a high-performance PoC scanner for CVE-2025-14847, a pre-authentication heap memory disclosure vulnerability in the MongoDB C++ Driver. The tool is designed for rapid identification of vulnerable instances across large network ranges. Technical Analysis The...

exploit-CVE-2022-24780

iTop RCE via SSTI - CVE-2022-24780 exploit iTop --debug exploit.rb light --debug exploit.rb -h | --help full: exploit with an emulated browser, execute JavaScript, preserve original user profile information light: just parse HTML and send requests, no JavaScript, DESTRUCTIVE reset user informatio...

dirty-pipe

Dirty Pipe - CVE-2022-0847 This is simply the code and instructions for how to use Max Kellermann's exploit for CVE-2022-0847 known as Dirty Pipe. Please go to https://dirtypipe.cm4all.com/ to read more about how to exploit works! How to use 1. Download and compile the exploit binary git clone...

CVE-2022-21449-TLS-PoC

CVE-2022-21449-TLS-PoC CVE-2022-21449 also dubbed Psychic Signatures in the vulnerability writeup by Neil Madden Proof of Concept demonstrating its usage with a vulnerable client and a malicious TLS server. The malicious server presents a valid as of 2022-04-20 cert chain for www.google.com which...

CVE-2024-27198

CVE-2024-27198 In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions in TeamCity server, an attacker can take full control over all TeamCity projects, builds, agents and artifacts, finally the attacker will perfomn a RCE. Download git clone...

npm-incident-response

npm-incident-response English | Português Standalone scanner for the keyv/cacheable supply-chain incident "Shai-Hulud: Here We Go Again", Aug 4 2026 — 440+ npm packages compromised by a self-propagating worm that steals cloud/CI credentials and plants persistence with a dead-man's switch. Detects...

CVE-2024-55504

CVE-2024-55504 An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploitcombined.dylib component on MacOS Reproduce From Terminal...

CVE-2023-52076-PoC

CVE-2023-52076-PoC Proof-of-concept for CVE-2023-52076, a critical path traversal and arbitrary file write vulnerability in Atril/Xreader document viewers affecting MATE Desktop environments. The script generates a crafted EPUB payload with zip-slip paths targeting either SSH configuration or...

MassExploit-CVE-2025-55182

CVE-2025-55182 – Massive Scanner PoC CVE-2025-55182 also referred to as “React2Shell” is a critical Remote Code Execution RCE vulnerability in the React Server Components RSC system. The issue occurs because the HTTP payload deserialization mechanism for “Server Functions” processes untrusted inp...

zephyr_cve-2021-3625

CVE-2021-3625 This repository contains a few example exploits for CVE-2021-3625. All Zephyr-based usb devices up to and including version 2.5.0 suffer from a buffer overflow allowing readout of up to 65kB. Depending on the actual device this may result of leakage of sensitive data like encryption...

CVE-2022-0847

CVE-2022-0847 Description - POC for CVE-2022-0847: Linux Kernel Local Privilege Escalation Vulnerability. Detail - Security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe' vulnerability and stated that it affects Linux Kernel 5.8 and later versions, even on Android devices. - A...

CVE-2026-50416-writeup-and-poc

CVE-2026-50416: a kernel address in the desktop heap On the affected system, this read from the user mapping of the Win32 desktop heap returned a kernel address: ULONG64 leaked = ULONG64 desktopheap + 0x100; That is the whole disclosure. At first it was only an eight-byte value with convincing hi...

CVE-2026-13152

CVE-2026-13152: Unauthenticated Privilege Escalation in Custom Fields Account Registration For WooCommerce 1.4 -blue.svg 📖 Advisory Overview CVE-2026-13152 is an unauthenticated privilege escalation vulnerability affecting the Custom Fields Account Registration For WooCommerce WordPress plugin...

CVE-2021-38583

CVE-2021-38583 openBaraza HCM HR Payroll v.3.1.6 Reflected XSS vulnerability openBaraza HCM HR Payroll v.3.1.6 does not properly neutralize user-controllable input, which allows reflected cross-site scripting XSS vulnerability on multiple pages. https://openbaraza.org...