EUVD-2026-92491

Plane is an open-source project management tool. Prior to 1.4.0, the cycle-issues endpoint accepts issue UUIDs in the request body without validating that they belong to the caller's workspace. An authenticated user can add issues from any workspace to a cycle they control. If a victim issue is...

CVE-2026-104969 Plane: Cross-Tenant Cycle Issue Hijack via IDOR

Plane is an open-source project management tool. Prior to 1.4.0, the cycle-issues endpoint accepts issue UUIDs in the request body without validating that they belong to the caller's workspace. An authenticated user can add issues from any workspace to a cycle they control. If a victim issue is...

IKEV2-POC

EpSiLoNPoInTIkEv2.cpp ⚠️ 프로젝트가 마무리 중입니다. 현재 상태에서는 완전히 작동하지 않습니다. 설명 EpSiLoNPoInTIkEv2.cpp는 Windows를 대상으로 하는 C/C++ 익스플로잇 프로토타입으로, ikeext.dll Windows IKEv2 드라이버 내의 double-free 유형 익스플로잇을 중심으로 개발되었으며, 연구 중 CVE-2026-33824로 참조됩니다. 이 프로젝트는 다음을 포함합니다: 완전한 난독화 계층 가상 머신, 제어 흐름 난독화, 문자열 은닉, 가짜 바이너리 서명, 분석 방지...

CVE-2026-7275-moodle

CVE-2026-7275-moodle CVE-2026-7275 에 대한 PoC 및 문서: Moodle Google Drive Repository repositorygoogledocs — 패치되지 않은 Moodle 버전에서 RCE 로 이어질 수 있는 Path Traversal / Arbitrary File Write 면책 조항: 승인된 보안 연구, 감사 및 방어 교육용으로만 사용하십시오. 서면 허가 없이 시스템에 사용하지 마십시오. Metadata 필드| 값 ---|--- CVE| CVE-2026-7275 권고|...

CVE-2024-45436

Ollama CVE-2024-45436 Exploit A clean and efficient exploit implementation for the Ollama ZIP traversal vulnerability CVE-2024-45436. 中文文档：READMECN.md Vulnerability Description CVE-2024-45436 is a path traversal vulnerability also known as "Zip Slip" in Ollama versions prior to 0.1.47. The...

QuickHeal

QuickHeal CVE-2017-5005 for Quick Heal Antivirus Advisory Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability. The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the...

CVE-2025-55188-7z-exploit

CVE-2025-55188-7z-exploit 7-Zip Symlink Arbitrary File Write PoC CVE-2025-55188 Description This proof-of-concept demonstrates CVE-2025-55188 , a vulnerability in 7-Zip versions prior to 25.01. The flaw occurs because 7-Zip does not properly handle symbolic links during extraction, allowing a...

Path Traversal

Apache Kyuubi is vulnerable to Path Traversal. The vulnerability is due to the use of the client‑supplied multipart filename when creating a temporary uploaded resource, where the filename is not validated and path traversal sequences such as ../ can be included, allowing a remote attacker to wri...

CVE-2023-41993

CVE-2023-41993 Exploit PoC This repository contains a Proof of Concept PoC exploit for the CVE-2023-41993 vulnerability. This PoC demonstrates limited read/write primitives based on the PoC released by po6ix. Demo of this PoC can be found here. Please make an issue if you have any questions,...

EUVD-2026-92475

auto-changelog before 2.6.1 merges configuration from inside the target repository the .auto-changelog file and the auto-changelog key in package.json into its options, and honors security-sensitive options from that untrusted source. The handlebarsSetup option is passed to require, so running...

CVE-2026-27641-Flask-Reuploaded

CVE-2026-27641 は、Flask-Reuploaded ライブラリの一部のバージョンに影響を与える重大なセキュリティ脆弱性です。これにより、リモートの攻撃者が任意のファイル書き込みを行うことができます。 影響を受けるバージョン: 1.5.0 脆弱性をテストするには: python3 -m venv flaskreuploadedvenv flaskreuploadedvenv 内で: pip install "Flask-Reuploaded==1.4.0" vulnserver を起動して PoC をテストします。...

CVE-2026-43503

🚨 CVE-2026-43503 — DirtyClone When Shared Memory Stops Being Shared Safely. A Local Privilege Escalation vulnerability caused by improper propagation of the SKBFLSHAREDFRAG flag inside the Linux networking stack. 📖 Overview CVE-2026-43503 , nicknamed DirtyClone , is a High Severity Local Privileg...

CVE-2026-55200

🚨 CVE-2026-55200 - Critical libssh2 Out-of-Bounds Write Vulnerability 📌 Overview CVE-2026-55200 is a critical memory corruption vulnerability affecting the widely deployed libssh2 library. The flaw arises from improper validation of the SSH packet length field during packet processing, potentiall...

CVE-2021-21551

CVE-2021-21551 CVE-2021-21551에 대한 개념 증명 익스플로잇입니다. 이 취약점은 사용자 제공 주소가 memmove 호출의 인수로 전달되어 임의 읽기/쓰기를 가능하게 하는 것ioctls 0x9B0C1EC4 및 0x9B0C1EC8과, MmMapIoSpace 호출의 물리적 주소 매개변수가 또 다른 임의 읽기/쓰기를 제공하는 것ioctls 0x9B0C1F40 및 0x9B0C1F44에서 발생합니다...

CVE-2025-55188

CVE-2025-55188: 7-Zip Arbitrary File Write Proof-of-concept of CVE-2025-55188, an arbitrary file write in 7-Zip. Patched in version 25.01, released on August 3, 2025. Note: CVE-2025-55188 is different than CVE-2025-11001. The version that CVE-2025-11001 was patched in version 25.00 is still...

root-dirtyc0w

root-dirtyc0w CVE-2016-5195 DirtyCow root privilege escalation Dirty COW was a race-condition vulnerability in the Linux kernel. This vulnerability lived inside the kernel functions which handle the copy-on-write COW feature of memory mappings and when exploited allowed processes to write to...

ghostlock-s26

GhostLock CVE-2026-43499 for the Galaxy S26 CVE-2026-43499 ported to the Samsung Galaxy S26 series — Android 16 / GKI 6.12. One binary, three kernel lines, dynamic parameter matching at runtime: theoretically covers the whole S26 series without per-build compilation. Most GhostLock porting effort...

CVE-2023-36407

CVE-2023-36407 This is poc for CVE-2023-36407, Hyper-V Elevation of Privilege Vulnerability. https://github.com/pwndorei/CVE-2023-36407/assets/96749184/a8ef87d3-e0d0-40e5-9b23-35ab057a9c78 Vulnerability OOB Read/Write from/to Non-paged Pool via winhvr.sys!WinHvGet/SetVpState Reproduction Steps...

mtkclient

言語: 🇺🇸 🇨🇳 MTKClient これは、エクスプロイト、フラッシュの読み書き、そしてクレイジーなことを行うための mtk ツールです。 Windows では、ストックの mtk ポートと usbdk ドライバーをインストールする必要があります（下記の手順を参照）。 Linux では、古い kamakiri を使用する場合にのみ、パッチ適用済みカーネルが必要です（Setup フォルダを参照）（フラッシュの読み書きを除く）。 mtk スクリプトが実行されたら、デバイスの電源を切り、vol up + power または vol down + power を押し続けながら電話を接続して...

CVE-2025-51529

CVE-2025-51529: WordPress Cookies and Content Security Policy Plugin DoS Vulnerability Incorrect Access Control in the AJAX endpoint functionality in jonkastonka Cookies and Content Security Policy plugin through version 2.29 allows remote attackers to cause a denial of service database server...