EUVD-2026-86346

PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption...

CVE-2022-41218

介绍 该漏洞是发生在 drivers/media/dvb-core/dmxdev.c 中的一个竞态条件漏洞。 因此，使用此 dmxdev 的 USB 设备驱动程序中也可能发生竞态条件。 此漏洞可用于触发 3 次 UAF。 漏洞 1. vmalloc UAF 写入 首先，漏洞利用的顺序如下（我使用 drivers/media/usb/ttusb-dec/ttusbdec.c 进行了调试）： cpu0 cpu1 cpu 2 1. dvbdvropen 2. ttusbdecdisconnect ttusbdecexitdvb dvbdmxdevrelease...

EUVD-2026-91675

uv: Path traversal on Windows through wheel extraction...

CVE-2016-10033

CVE-2016-10033 – Ejecución Remota de Código en PHPMailer 📌 Descripción Este repositorio contiene un exploit de prueba de concepto PoC para CVE-2016-10033 , una vulnerabilidad en versiones de PHPMailer anteriores a 5.2.18. El problema ocurre cuando el argumento $additionalparameters de la función...

CVE-2022-3699

CVE-2022-3699 Exploit de prueba de concepto para CVE-2022-3699 Exploit probado en Windows 10 22H2 build 19045.4651 y build 19045.3803 La vulnerabilidad permite a usuarios sin privilegios acceder a funcionalidad que permite leer y escribir desde la memoria física desde la instancia del kernel; sin...

NPM: vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool

NPM: vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.6...

CVE-2026-105744

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptionstikzengine="tectonic" invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ bo...

CVE-2024-50379-exp

CVE-2024-50379-exp -t 条件竞争时间 -u 域名 -f 写入木马 测试发现第一次条件竞争时有很大几率会写入失败需要重新再进行一次条件竞争才会写入木马，所以脚本第一次会进行固定6秒条件竞争检测是否写入，没有会再进行用户自定义或者默认的10秒检测，生成的木马为随机md5.jsp python .\CVE-2024-50379.py -u http://192.168.31.33:8888/ -f '123456' -t 10 image...

CVE-2025-9074

CVE-2025-9074 – Docker Desktop Windows Escritura de Contenedor a Host a través de la API del Motor Expuesta Autor: w01f Estado: Prueba de Concepto solo con fines educativos / pruebas autorizadas Resumen Este proyecto demuestra una PoC para CVE-2025-9074 , una mala configuración/exposición en...

RtlHijack

RtlHijack Un repositorio con scripts para demostrar primitivas alternativas de lectura y escritura usando funciones Rtl de la manera no prevista. RtlFillMemory.c RtlFillMemory toma tres argumentos: un puntero a la memoria de destino, el número de bytes a escribir y un valor de un solo byte. Escri...

CVE-2025-21333

CVE-2025-21333 Puedes encontrar la primera versión del exploit para este CVE en https://github.com/MrAle98/CVE-2025-21333-POC/tree/master. Hice este nuevo exploit inspirado en el realizado por MrAle98. Es más estable y un poco rudimentario, ya que no abre el proceso de Windows Sandbox para obtene...

CVE-2026-105744 Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptionstikzengine="tectonic" invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ bo...

CVE-2026-105744

The Docling library (versions 2.94.0 through 2.132.0 ) is vulnerable to arbitrary file read/write and potential command execution when using the opt-in Tectonic engine to render untrusted TikZ. The root cause lies in docling/backend/latex/engines/tectonic.py, which fails to restrict TeX primitive...

CVE-2026-66906

CVE-2026-66906 — camel-azure-storage-blob downloadBlobToFile path traversal Reproductores de prueba de concepto ejecutables para la misma vulnerabilidad de Apache Camel, uno por runtime: Runtime| Directorio| Stack ---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.5.13 +...

CVE-2026-105741

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass th...

CVE-2026-105447

A flaw was found in Quay. When handling build trigger requests, the application incorrectly exposes trigger configuration details containing repository write tokens to global read-only administrative users. An authenticated user with read-only privileges can exploit this flaw by querying the buil...

EUVD-2026-92800

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass th...

CVE-2026-105741 Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass th...

CVE-2026-105741

The software Langflow (versions 1.5.0 through 1.10.3) is vulnerable to an IP spoofing issue within the Model Context Protocol (MCP) configuration installation endpoint (POST /api/v1/mcp/project/{project_id}/install). An authenticated remote attacker can bypass "local-only" access restrictions by ...

CVE-2026-105741 Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write

Langflow is a tool for building and deploying AI-powered agents and workflows. From 1.5.0 until 1.10.3, an IP spoofing vulnerability in the Model Context Protocol MCP configuration installation endpoint POST /api/v1/mcp/project/projectid/install allowed authenticated remote attackers to bypass th...