90609 matches found
BasicHook
BasicHook Hooks functions using 32-bit relative jump, writing is done atomically to avoid race conditions. Uses hde32 from instruction length disassembly...
CVE-2023-45878
CVE-2023-45878 GibbonEdu Arbitrary File Write to Web Shell Execution Description This repository contains an exploit for CVE-2023-45878 , an arbitrary file write vulnerability in GibbonEdu. The vulnerability affects the rubricsvisualisesaveAjax.php endpoint and allows an unauthenticated attacker ...
CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26
CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26 Fully automated exploit for CVE-2024-25641. When a user is authenticated, Cacti version 1.2.26 is vulnerable to an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import...
Reg1c1de
Reg1c1de: Windows Registry Privesc Scanner Summary from help output: Reg1c1de is a tool that scans specified registry hives and reports on any keys where the user has write permissions In addition, if any registry values are found that contain file paths with certain file extensions and they are...
forensicscanner
This repository does not have a README...
CVE-2026-105786
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, packages/server/src/models/ApplicationModel.ts accepts a caller-chosen application authorization identifier, applications/:id/confirm binds that identifier to a logged-in use...
Pentest-Everything
⚔️ Pentest Everything Important Bookmark this page as other page links are likely to change or move over time. This page will always remain the same. About this book This book is my collection of notes and write-ups for various offensive security based topics and platforms. This book is generally...
CVE-2026-104036 Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin
A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...
EUVD-2026-92893
A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...
CVE-2026-104036
A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...
CVE-2026-104036
A flaw in the SSSD NFS idmap plugin allows for an out-of-bounds write when retrieving cached user or group names. The vulnerability occurs because the plugin identifies that an entry exceeds the destination buffer size but fails to abort the operation before copying the data. A local attacker can...
CVE-2026-104036
A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...
Apple CoreGraphics Out-Of-Bounds Write
Apple CoreGraphics contains an out-of-bounds write fixed in iOS and iPadOS 26.7.1, macOS Sequoia 15.8.1, and macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution...
CVE-2026-77178
Oracle VM VirtualBox versions prior to 7.2.8 are vulnerable to an out-of-bounds write in the host OS. The flaw is located within the pcnetReceiveNoSync function in DevPCNet.cpp, specifically affecting the PCNet (Am79C970A) network device model. This allows guest OS users to trigger the write. No ...
A flaw was found in the GLib Base64 encoding routine when processing very large input data (CVE-2026-1484)
A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrust...
TeamViewer Desktop Clients Before 15.81.5 Path Traversal
TeamViewer Desktop Clients before version 15.81.5 contain a path traversal flaw in file transfer that may allow an authenticated remote session participant to write files outside the selected download directory...
PT-2026-106731
Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet Am79C970A network device model...
CVE-2026-77178
Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet Am79C970A network device model...