CVE-2025-6218

CVE-2025-6218 | ZDI-CAN-27198 | ZDI-25-409 - WinRAR Path Traversal - Remote Code Execution RCE Prova di concetto Maggiori informazioni: https://www.win-rar.com/singlenewsview.html?&L=0 https://www.cvedetails.com/cve/CVE-2025-6218/ https://www.zerodayinitiative.com/advisories/ZDI-25-409/...

CVE-2026-54984

CVE-2026-54984 Scrittura fuori dai limiti nel parsing di file ICC di Windows — esecuzione di codice in remoto Segnalata tramite la Zero Day Initiative come ZDI-CAN-30441 , pubblicata come ZDI-26-543 , corretta da Microsoft nel ciclo di aggiornamenti di agosto 2026. Ciao, sono Kağan Çapar. Ho...

CVE-2019-17147_Practice_Material

CVE-2019-17147PracticeMaterial Questa repo contiene partizioni flash estratte con versione del firmware vulnerabile a CVE-2019-17147 e alcuni binari utili per fare il downgrade e il debug del tuo router WR841NV14. Effettuare modifiche hardware come sovrascrivere le partizioni del chip flash...

CVE-2026-0766

CVE-2026-0766: Esecuzione di Codice Remota in OpenWebUI Repository di Ricerca sulla Sicurezza a Scopo Educativo Questo repository contiene codice proof-of-concept per lo sfruttamento di CVE-2026-0766 , una vulnerabilità di esecuzione di codice remota in OpenWebUI scoperta e pubblicata dalla Zero...

CVE-2021-21042

CVE-2021-21042 Ispirato da https://www.zerodayinitiative.com/blog/2021/2/17/zdi-21-171-getting-information-disclosure-in-adobe-reader-through-the-id-tag...

CVE-2019-0604_sharepoint_CVE

CVE-2019-0604 CVE-2019-0604 Da https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...

CVE-2015-6612

CVE-2015-6612 I dettagli della vulnerabilità si trovano in description.pdf. La mia triste storia su questo bug: Ho segnalato questo problema a ZDI lo scorso marzo; all'inizio hanno detto di non riuscire a riprodurlo nell'ultima versione di Android, dopo due settimane di comunicazione hanno deciso...

ZDI-CAN-16857

Exploit per CVE-2023-32163 ZDI-CAN-16857 0-day Qui puoi leggere il mio report 📜 Qui puoi comprarmi un unicorno 🦄 Condividi la Conoscenza!...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: usb:vhci-hcd: Do not drop references before new references are obtained. In several places, the driver maintains stale pointers to references that can still be used. Ensure that this does not occur. Strictly speaking, this resolv...

CVE-2026-26179

CVE-2026-26179 PoC per CVE-2026-26179 / ZDI-26-276, il mio personalissimo bug del Secure Kernel. So bene di avere un repository dedicato alle mie vulnerabilità e/o exploit, ma questo bug in particolare è piuttosto speciale almeno per me. Per questo motivo, ho scelto di dedicargli un repository...

CVE-2026-92179

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

EUVD-2026-79137

pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target mu...

CVE-2026-19781 Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...

EUVD-2026-79133

OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target...

EUVD-2026-79132

OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the targ...

EUVD-2026-79131

BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in...

EUVD-2026-79129

Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Fabric.js. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on t...

CVE-2026-92179: Out-of-bounds Write

pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-19886: Improper Restriction of Operations within the Bounds of a Memory Buffer

OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the target...

CVE-2026-19885: Out-of-bounds Write

OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of OriginLab Origin Viewer. User interaction is required to exploit this vulnerability in that the targ...