CVE-2025-6218

CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - WinRAR Path Traversal - Remote Code Execution RCE Proof of Concept More information: https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/ https://www.zerodayinitiative.com/advisories/ZDI-25-409/ RARLAB WinRAR...

CVE-2026-26179

CVE-2026-26179 PoC for CVE-2026-26179 / ZDI-26-276, my very own Secure Kernel bug. I'm well aware that I have a dedicated repository for my vulnerabilities and/or exploits, but this bug in particular is rather special at least to me. As such, I have opted to give it its own repository. I also pla...

CVE-2019-17147_Practice_Material

CVE-2019-17147PracticeMaterial 此仓库包含易受 CVE-2019-17147 影响的固件版本的 flash 分区转储文件，以及一些用于降级和调试你的 WR841NV14 路由器的实用二进制文件。 进行硬件修改（例如覆写 flash 芯片分区）存在风险。请自行评估风险并决定是否要这样做。 为什么？ ZDI 发布的文章：https://www.zerodayinitiative.com/blog/2019/12/2/mindshare-hardware-reversing-with-the-tp-link-tl-wr841n-router-part-2...

CVE-2026-54984

CVE-2026-54984 Windows ICC 文件解析越界写入 — 远程代码执行 通过 Zero Day Initiative 报告，编号为 ZDI-CAN-30441 ，以 ZDI-26-543 发布，微软已在 2026 年 8 月更新周期中修复。 大家好，我是 Kağan Çapar。我将此漏洞报告给了 Zero Day Initiative，后者于 2026 年 6 月 2 日向微软披露。该漏洞已于 2026 年 8 月 11 日（8 月补丁星期二）修复并公布，我也在 ZDI 公告中获得了致谢。 本仓库的内容。 这是一份公开的披露记录：标识符、评分、受影响版本、补丁 KB...

CVE-2026-0766

CVE-2026-0766：OpenWebUI 远程代码执行 教育性安全研究仓库 本仓库包含针对 CVE-2026-0766 的概念验证利用代码，这是由 零日计划（ZDI） 发现并公开的 OpenWebUI 远程代码执行漏洞。 ⚠️ 免责声明 本仓库仅用于授权的安全测试和教育目的。 使用此代码测试您自己的系统 或您拥有明确授权 进行测试的系统 将此用于学习 LLM 平台安全漏洞相关知识 ❌ 切勿 在未经明确许可的情况下针对任何系统使用此代码 ❌ 未经授权访问计算机系统是违法行为 作者不对滥用此代码的行为承担任何责任。用户须自行确保其活动符合所有适用的法律法规。 📋 漏洞概述 属性| 值...

CVE-2015-6612

CVE-2015-6612 关于该漏洞的详细信息，请参阅 description.pdf 关于此漏洞的我的悲伤故事： 我于去年三月向 ZDI 报告了此问题。起初，他们表示无法在最新的 Android 版本上复现，经过半个月的沟通后，他们决定不收购该漏洞。 我持有这个漏洞很长时间，并于2015年8月21日向 Google 报告，但它成为了一个重复的问题。 https://code.google.com/p/android/issues/detail?id=183414 有趣的是，它与2015年8月23日报告的问题重复，即 ANDROID-23540426...

CVE-2021-21042

CVE-2021-21042 Inspired from https://www.zerodayinitiative.com/blog/2021/2/17/zdi-21-171-getting-information-disclosure-in-adobe-reader-through-the-id-tag...

CVE-2026-92179

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

EUVD-2026-79137

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2026-19781 Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...

EUVD-2026-79133

OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target...

EUVD-2026-79132

OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the targ...

EUVD-2026-79131

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...

EUVD-2026-79129

Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fabric.js. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on t...

CVE-2019-0604_sharepoint_CVE

CVE-2019-0604 CVE-2019-0604 From https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...

ZDI-CAN-16857

Exploit para CVE-2023-32163 ZDI-CAN-16857 0-day Aquí puedes leer mi informe 📜 Aquí puedes comprarme un unicornio 🦄 ¡Comparte el conocimiento!...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb:vhci-hcd: Do not drop references before new references are obtained. In several places, the driver maintains stale pointers to references that can still be used. Ensure that this does not occur. Strictly speaking, this resolv...

Astra Linux – Vulnerability in gst-plugins-good1.0

GStreamer FLAC File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability, but the attack vectors may vary...

Astra Linux – Vulnerability in GIMP

GIMP JP2 File Parsing: Heap-Based Buffer Overflow and Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability, as the target must visit a malicious page ...

CVE-2026-78455

creationtimestamp| type| source ---|---|--- 2026-09-08 22:09:19+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:08:15+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 10:50:01+00:00|...