exploits

exploits This repository contains all of the shellcode or exploits I submitted to https://www.exploit-db.com/. All exploits listed here are not 0day, all software talked about have a fix available. Please note that the exploits are either for your own curiosity on your own machines, or to check...

exploits

exploits various exploits...

firstexecution

firstexecution Collection of different ways to execute code outside of the expected entry points...

Rocky Linux 9 [CIQ] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc Multiple Vulnerabilities (crlsa-2024_1427)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20241427 advisory. CVE-2023-6186 libreoffice: various flaws JIRA:Rocky Linux-20657 CVE-2023-6185 libreoffice: various flaws JIRA:Rocky Linux-20657 Tenable has extracted the...

FreeBSD : arti -- Various security issues (a93ff4d6-bdcd-11f1-af91-9cbf0d00daec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a93ff4d6-bdcd-11f1-af91-9cbf0d00daec advisory. Torproject reports: Various security issues discovered in versions below 2.7.0. Tenable has extracted t...

EasyStore Pro 2.0.1, , Other

various...

CVE-2026-48951 Joomla! Core - [20260705] - XSS in various modalreturn layouts

Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components...

CVE-2026-48951

Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components...

CVE-2026-48951 Joomla! Core - [20260705] - XSS in various modalreturn layouts

Lack of escaping leads to XSS vulnerabilities in modalreturn layouts of various components...

Fedora 44 : python-jupyter-server (2026-dd1d19e58b)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dd1d19e58b advisory. New version fixing high-severity CVE. ---- New version of jupyter-server fixing various security vulnerabilities. Tenable has extracted the precedin...

Oracle MySQL Server security vulnerabilities

Oracle MySQL Server is a relational database management system developed by Oracle Corporation. Vulnerabilities exist in versions 8.0.0 to 8.0.45, 8.4.0 to 8.4.8, and 9.0.0 to 9.6.0 of Oracle MySQL Server. These vulnerabilities stem from issues with the Server: Optimizer component, which may allo...

EUVD-2026-17859

Lack of output escaping for article titles leads to XSS vectors in various locations...

CVE-2026-21632

Lack of output escaping for article titles leads to XSS vectors in various locations...

ASB-A-483074618

In multiple locations, there is a possible way to access unexpected data due to multiple causes. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-8762

n8n Vulnerable to Stored XSS via Various Nodes...

[SECURITY] Fedora 42 Update: rust-ambient-id-0.0.10-1.fc42

Detects ambient OIDC credentials in a variety of environments...

USN-8028-5 linux-aws, linux-aws-6.8, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities

It was discovered that improper initialization of CPU cache memory could allow a local attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. CVE-2024-36331 Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt...

[SECURITY] Fedora 42 Update: rust-ambient-id-0.0.8-1.fc42

Detects ambient OIDC credentials in a variety of environments...

WordPress Elementor Addons by Livemesh plugin <= 8.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Various Widgets vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Various Widgets vulnerability discovered by wesley wcraft in WordPress Plugin Livemesh Addons for Elementor versions = 8.3.7...

EUVD-2026-2912

In Apache Airflow versions before 3.1.6, the proxies and proxy fields within a Connection may include proxy URLs containing embedded authentication information. These fields were not treated as sensitive by default and therefore were not automatically masked in log output. As a result, when such...