POC-CVE-2025-66034

fontvarlib.py — CVE-2025-66034 fontTools varLib — Escritura Arbitraria de Archivos + Inyección XML → Ejecución Remota de Código Tabla de Contenidos Descripción General Detalles de la Vulnerabilidad Cadena de Ataque Requisitos Instalación Configuración Uso Cómo Funciona Código Vulnerable Lista de...

CVE-2024-21762-Safe-Check

CVE-2024-21762 - Escritura Fuera de Límites en SSL VPN de FortiOS Resumen Campo| Valor ---|--- CVE| CVE-2024-21762 Aviso| FG-IR-24-015 CVSS| 9.8 Crítico CWE| CWE-787 Escritura fuera de límites CISA KEV| Sí - explotada activamente en la naturaleza Vector de Ataque| Red sin autenticar Componente...

CVE-2026-90267

A flaw was found in the Linux kernel's SCSI subsystem. When handling UNMAP and WRITE SAME commands, a memory leak can occur if the scsiallocsgtables function fails after a special payload page has been allocated. This oversight prevents the proper deallocation of the page, leading to a memory lea...

CVE-2026-75855

Título El path traversal en los comandos de servidor "create database" / "drop database" permite la escritura y eliminación arbitraria de archivos fuera del directorio de base de datos configurado Resumen El endpoint POST /api/v1/server en sus comandos create database y drop database utiliza el...

Helix3-Mass-Exploiter

Escáner y Auto-Escritura CVE-2026-49049 Una herramienta especializada de investigación de seguridad para identificar y probar la vulnerabilidad CVE-2026-49049 que afecta al framework JoomShaper Helix3. Solo con fines educativos. Este proyecto está destinado a pruebas de seguridad autorizadas e...

CVE-2022-23277

exchCVE-2021-42321 Este artículo es la herramienta mencionada en el artículo del equipo de seguridad 7bits "DotNet Security - Reproducción de la vulnerabilidad CVE-2022-23277" La parte de autenticación debe agregarse manualmente a través de Burp Suite. Después de una explotación exitosa, se...

CVE-2025-4517-POC

Exploit CVE-2025-4517 NOTAS Este exploit y su descripción están escritos por IA. Si encuentras un error o problema, ¡por favor házmelo saber! Este exploit fue probado y confirmado que funciona. ¡Gracias! Resumen Este exploit aprovecha CVE-2025-4517 , una vulnerabilidad crítica en el módulo tarfil...

EUVD-2026-92611

In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58815

In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58815

The provided documents identify an out of bounds write vulnerability in multiple locations caused by an incorrect bounds check . This flaw could lead to local escalation of privilege without requiring additional execution privileges or user interaction. While the specific affected software or har...

CVE-2026-55286

In stpropnciprocess of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55286

In stpropnciprocess of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55286

A vulnerability exists in the stpropnci_process function of stpropnci.cc due to an incorrect bounds check . This flaw can result in an out of bounds write , potentially allowing for local escalation of privilege without requiring additional execution privileges. Exploitation does not require user...

EUVD-2026-92610

In stpropnciprocess of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-92609

In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55280

In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55280

The software is vulnerable to an out-of-bounds write caused by the use of uninitialized data in multiple locations. This security flaw could allow an attacker to achieve remote escalation of privilege without requiring additional execution privileges. The vulnerability does not require any user i...

EUVD-2026-92606

In qsort of libufdtsysdepsvendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55266

A vulnerability exists in the qsort function within libufdt_sysdeps_vendor.c , where a possible out-of-bounds write can occur due to resource exhaustion . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. No specific exp...

CVE-2026-55266

In qsort of libufdtsysdepsvendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...