100878 matches found
postgres-basebackup-symlink
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · postgres-basebackup-symlink postgres-basebackup-symlink Class: File write Reach: Remote PostgreSQL 18.6 724edf9 - PostgreSQL Global Development Group CVE-2026-6475 added pathissafeforextraction for tar member names...
CVE-2024-2887-REPORT
SSD Advisory – Google Chrome RCE Source: ssd-disclosure.com/ssd-advisory-google-chrome-rce Summary A critical remote code execution vulnerability in Google Chrome versions 123 and earlier affecting WebAssembly WASM garbage-collection type handling. The bug allows type confusion that can be...
Important: Red Hat Security Advisory: postgresql:18 security update
An update for the postgresql:18 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build
A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...
es_inject
CVE-2014-3120 Elastic Search Remote Code Execution This project demonstrates the CVE-2014-3120 vulnerability/misconfiguration. It allows you to read from and append to files on the system hosting ES, provided the user running ES has access to them. Notes This does not require a web server. Save i...
CVE-2026-48282-coldfusion-rds-detection
CVE-2026-48282 — Adobe ColdFusion RDS Validation and Detection Laboratory validation of CVE-2026-48282 in Adobe ColdFusion Remote Development Services RDS, focused on technical evidence, event reconstruction, and defensive detection opportunities. The repository documents a controlled test in whi...
Important: Red Hat Security Advisory: postgresql:16 security update
An update for the postgresql:16 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build
A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...
CVE-2026-47323
camel-cxf-rest / camel-cxf / camel-knative-http Header Injection Reproducer CVE-2026-47323 This project demonstrates a message-header injection in Apache Camel's CXF and Knative HTTP header-filter strategies, tracked as CVE-2026-47323. CxfRsHeaderFilterStrategy camel-cxf-rest,...
FUXAPWN
CVE-2026-25895 — FUXA = 1.2.9 Unauthenticated Path Traversal to Remote Code Execution Unauthenticated, pre-auth arbitrary file write against FUXA, a Node.js-based SCADA/HMI platform. Chains to remote code execution via several distinct post-write primitives. Works even when secureEnabled = true...
ghostlock-s26
GhostLock CVE-2026-43499 for the Galaxy S26 CVE-2026-43499 ported to the Samsung Galaxy S26 series — Android 16 / GKI 6.12. One binary, three kernel lines, dynamic parameter matching at runtime: theoretically covers the whole S26 series without per-build compilation. Most GhostLock porting effort...
CVE-2019-9702_Symantec_Encryption_Desktop_LPE_PoC
Symantec Encryption Desktop PGPwded.sys local privilege escalation PoC This repository contains a proof-of-concept for a local privilege escalation path in Symantec Encryption Desktop's PGPwded.sys storage filter, based on a low-privileged raw disk read/write primitive. The PoC was developed and...
CVE-2026-10053-lab
CVE-2026-10053 — reproducible verification lab Self-contained lab that proves the GitLab npm package-registry path traversal CVE-2026-10053 and shows it fixed, using a deterministic on-disk oracle — not HTTP status. What is and isn't proven. This lab proves authenticated arbitrary file write as...
CVE-2026-109831
UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service DoS condition...
CVE-2026-66906
CVE-2026-66906 — camel-azure-storage-blob downloadBlobToFile path traversal Runnable proof-of-concept reproducers for the same Apache Camel vulnerability, one per runtime: Runtime| Directory| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 + camel-azure-storage-blob...
copy-fail-checker
Copy Fail Checker — CVE-2026-31431 A small, dependency-light Bash script that tells you whether your Linux system is exposed to the Copy Fail local privilege-escalation vulnerability CVE-2026-31431. The script is read-only : it never exploits the bug, never loads kernel modules, and never modifie...
CVE-2026-59310
CVE-2026-59310 More echo '1 2026-08-14T12:00:00.000Z ../../../../../../opt/vmware/share/htdocs/configurev2/cve59310chkee57b163c432 research - - - CVE-2026-59310-ee57b163c432'|nc syslogserver 514 GET /configurev2/cve59310chkee57b163c432-syslog.log HTTP/1.1...
CVE-2026-109831
UnRTF by GNU Project is vulnerable to out-of-bounds write. If a user opens an RTF file crafted by an attacker, it may lead to a denial-of-service DoS condition...
