Cisco_CVE-2023-20198

CiscoCVE-2023-20198 Cisco CVE-2023-20198 👉 Cisco warned of a critical authentication bypass zero-day vulnerability CVE-2023-20198 in its IOS XE software that allows unauthenticated attackers to gain full administrative privileges. 👨‍💻 The vulnerability only affects devices with the Web User...

CVE-2021-26415

PoC Quick PoC for CVE-2021-26415 as described on https://www.cloaked.pl/2021/04/cve-2021-26415/ The BaitAndSwitch.exe is compiled from https://github.com/googleprojectzero/symboliclink-testing-tools/tree/master/BaitAndSwitch...

CLFS

CLFS attack - CVE-2023-28252 Since February 2022 was reported a new ransomware that appears to be using a Windows 0-day vulnerability, according to the research conducted by Trend Micro. More information about this ransomware can be found at this link. According to analysis by Kaspersky, the...

CVE-2023-38831-PoC

CVE-2023-38831 PoC This repository is just a Proof-of-Concept for CVE-2023-38831 Zero-Day vulnerability in WinRAR RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may inclu...

ams-failopen

Fail-Open Signing in AppleMediaServices Zero-Day Disclosure Summary This issue constitutes a live Zero-Day vulnerability and reflects a systemic design flaw in AppleMediaServices.framework, rather than a regression or version-specific bug. A critical fail-open flaw in Apple’s AppleMediaServices...

CVE-2024-4040-CrushFTP-File-Read-vulnerability

CVE-2024-4040: CrushFTP File Read Vulnerability Overview On April 19, 2024, a new zero-day vulnerability affecting CrushFTP versions below 10.7.1 and 11.1.0, as well as legacy 9.x versions, was disclosed to a private mailing list by the managed file transfer vendor CrushFTP. Initially, no CVE was...

cve-2025-39682

CVE-2025-39682 exploit on kernelCTF mitigation instance This is also my first ? idk, this is a variant of CVE-2024-58239 1-day exploit. Patch: tls: fix handling of zero-length records on the rxlist This CVE was used in exp398 and and exp403. kernelCTF spreadsheet. For folder structures and how to...

CVE-2025-53770

Divine Absolute - CVE-2025-53770 Exploit Tool Overview Divine Absolute is a sophisticated, wizard-driven Python exploit tool targeting CVE-2025-53770 , a critical CVSS 9.8 unauthenticated remote code execution RCE vulnerability in on-premises Microsoft SharePoint Server 2016, 2019, Subscription...

CVE-2026-98647

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

UBUNTU-CVE-2026-98672

In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing val can lead to a division by zero. Need to check for errors, or converted value is zero, befo...

UBUNTU-CVE-2026-98647

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

CVE-2026-98672

In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing val can lead to a division by zero. Need to check for errors, or converted value is zero, befo...

PT-2026-117655

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description A flaw exists in the Python imaging library where the ImageMorph.MorphOp.apply function can access memory before a row buffer when processing images with a width of zero. This occurs because the PPM...

PT-2026-117653

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description Rank-based filters in the Pillow Python imaging library can dereference invalid image storage when processing a zero-size image. The ImagingExpand function allocates a non-empty output but faults...

Red Hat: CVE-2026-112392: pillow: pillow: Denial of Service via zero-size images in rank filters

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand allocates a non-empty output and then faults while replicating edges by reading the first pixel from empty input storage; ImagingRankFilter i...

quantum-zk-proof-poc

PoC for breaking Google's zero-knowledge proof of quantum cryptanalysis This repository contains resources for the Trail of Bits blog post detailing how we beat Google's zero-knowledge proof that they have a high-efficiency quantum circuit for elliptic curve cryptanalysis. It includes our forged...

SUSE CVE-2026-98647

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a single element with off - moff % t-size, but never checks that the...

SUSE CVE-2026-98672

In the Linux kernel, the following vulnerability has been resolved: iio: adc: stm32-adc: fix possible division by zero in processed channel In case the conversion has failed or returned zero, processing val can lead to a division by zero. Need to check for errors, or converted value is zero, befo...

chrome_v8_cve_checker

How to use Open https://itsshotgun.github.io/chromecve-2025-5419checker/ in Chrome The page will detect your Chrome version and tell you if you’re vulnerable. If vulnerable, it’ll show a link to update Chrome immediately. Why This zero-day lets malicious websites run baaaaaaad code on your machin...

gate0

gate0 A small, auditable, terminating, deterministic micro-policy engine. Why Gate0? I built Gate0 because I was tired of debugging RegEx-based policies in production. I wanted something that was boring, bounded, and impossible to crash. If you want a flexible, general-purpose policy engine, you...