PT-2026-106731

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet Am79C970A network device model...

CVE-2026-77178

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet Am79C970A network device model...

PT-2026-106288

A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but fails to abort before copying data. A local attacker can trigger this vulnerability by requesting identity lookups that resolve to...

Linux Distros Unpatched Vulnerability : CVE-2026-104036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in SSSD's NFS idmap plugin. When retrieving cached user or group names, the plugin detects if an entry exceeds the destination buffer size but...

SUSE SLES16: helm / helm-bash-completion / helm-fish-completion / etc (SUSE-SU-2026:23984-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:23984-1 advisory. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. -...

EUVD-2026-93418

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.cpp in the PCNet Am79C970A network device model...

EUVD-2026-86348

PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding...

EUVD-2026-86346

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption...

CVE-2022-41218

Introducción Esta vulnerabilidad es una vulnerabilidad de condición de carrera que ocurre en drivers/media/dvb-core/dmxdev.c. Por lo tanto, puede ocurrir una condición de carrera en el controlador del dispositivo usb que utiliza este dmxdev. Esta vulnerabilidad podría usarse para desencadenar 3...

EUVD-2026-91675

uv: Path traversal on Windows through wheel extraction...

CVE-2016-10033

CVE-2016-10033 – Ejecución Remota de Código en PHPMailer 📌 Descripción Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2016-10033 , una vulnerabilidad en versiones de PHPMailer anteriores a 5.2.18. El problema ocurre cuando el argumento $additionalparameters de la función...

CVE-2022-3699

CVE-2022-3699 Exploit de prueba de concepto para CVE-2022-3699 Exploit probado en Windows 10 22H2 build 19045.4651 y build 19045.3803 La vulnerabilidad permite a usuarios sin privilegios acceder a funcionalidad que permite leer y escribir desde la memoria física desde la instancia del kernel; sin...

NPM: vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

NPM: vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.6...

CVE-2026-105744

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptionstikzengine="tectonic" invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ bo...

CVE-2024-50379-exp

CVE-2024-50379-exp -t race condition time -u domain -f write webshell Testing found that during the first race condition, there is a high probability that writing will fail. Another race condition is required to write the webshell. Therefore, the script first performs a fixed 6-second race...

CVE-2025-9074

CVE-2025-9074 – Docker Desktop Windows Escritura de Contenedor a Host a través de la API del Motor Expuesta Autor: w01f Estado: Prueba de Concepto solo con fines educativos / pruebas autorizadas Resumen Este proyecto demuestra una PoC para CVE-2025-9074 , una mala configuración/exposición en...

RtlHijack

RtlHijack A repository with scripts to demonstrate alternative Read and Write primitives using Rtl functions the unintended way. RtlFillMemory.c RtlFillMemory takes three arguments: a pointer to the destination memory, the number of bytes to write, and a single byte value. Writes only a byte into...

CVE-2025-21333

CVE-2025-21333 Puedes encontrar la primera versión del exploit para este CVE en https://github.com/MrAle98/CVE-2025-21333-POC/tree/master. Hice este nuevo exploit inspirado en el realizado por MrAle98. Es más estable y un poco rudimentario, ya que no abre el proceso de Windows Sandbox para obtene...

CVE-2026-105744 Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptionstikzengine="tectonic" invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ bo...

CVE-2026-105744

The Docling library (versions 2.94.0 through 2.132.0 ) is vulnerable to arbitrary file read/write and potential command execution when using the opt-in Tectonic engine to render untrusted TikZ. The root cause lies in docling/backend/latex/engines/tectonic.py, which fails to restrict TeX primitive...