misc PoCs
subscribe (RSS)Proof-of-concept research filed under the misc category.
Entries
33
in misc
CISA KEV
3
exploited in the wild
Ransomware
1
known campaign use
Unpatched
7
no vendor fix
Critical
8
24% of listed
Severity
Exploitation signals
Patch status
Date range
33 result(s)
- CVE-2026-18718 misc HIGH 7.5
Ghidra — Swift Demangler Arbitrary Code Execution via Shared Project Files (CVE-2026-18718)
Opening someone else's Ghidra project is enough to execute their code — with no prompt, no signature check, and no integrity verification.
Patched 2026-08-09 - CVE-2025-12735 misc CRITICAL 9.8
safe-expr-eval: Mitigation Library for the expr-eval Unsafe eval() RCE (CVE-2025-12735)
CVE-2025-12735 is a critical arbitrary code execution vulnerability in the expr-eval npm package: instead of tokenizing and walking expressions through a restricted interpreter, expr-eval's evaluation path ultimately reaches JavaScript's eval()/Function()…
Patched 2026-07-06 - CVE-2025-4517 misc CRITICAL 9.4
Python tarfile `filter="data"` Bypass via PATH_MAX/realpath Confusion (CVE-2025-4517)
Python's tarfile module added extraction filters (filter="data"/"tar", PEP 706, enabled by default since Python 3.12 and backported) specifically to prevent unsafe archive extraction — path traversal, symlink escapes, and writes outside the destination…
Patched 2026-07-06 - CVE-2025-30065 misc CRITICAL 9.8 EPSS 41%
Apache Parquet-Avro Schema Deserialization RCE/SSRF — Incomplete-Fix Bypass (CVE-2025-30065)
CVE-2025-30065 is an unsafe class-instantiation vulnerability in Apache Parquet Java's parquet-avro module: crafted Avro schema metadata embedded in a Parquet file can force the reading JVM to load and instantiate attacker-named classes. The official 1.15.1…
Patched 2026-07-06 - CVE-2026-36851 misc HIGH 7.5
UnPoller Path Traversal / Arbitrary File Read via file:// Password Prefix (CVE-2026-36851)
UnPoller supports a file:// prefix convention for its UniFi controller password configuration value, intended to read the password from a file on disk. However, the path following the file:// prefix is not restricted, allowing path traversal to read arbitrary…
Unverified 2026-07-05 - CVE-2026-1814 misc HIGH
Rapid7 Nexpose Weak Keystore Entropy Credential Decryption — CVE-2026-1814
Rapid7 Nexpose stores site/scan credentials in an exported XML file, with each <credentials> element holding a hex-encoded salt, RSA-wrapped AES key, and AES-CBC-encrypted blob. The private key needed to unwrap the AES key lives in a PKCS12 keystore whose…
Unverified 2026-07-05 - CVE-2026-24688 misc HIGH
pypdf Circular Outline Reference Infinite-Loop DoS (CVE-2026-24688)
pypdf's outline (bookmark) parser walks the linked list of outline entries via the /Next pointer without any cycle detection or iteration cap. A PDF crafted with a circular outline reference (an entry whose /Next chain loops back on itself) causes…
Patched 2026-07-05 - CVE-2026-31900 misc HIGH 8.7
psf/black GitHub Action RCE via Insecure Regex Version Validation — CVE-2026-31900
The psf/black GitHub Action's usepyproject: true option reads the Black version to install from the repository's pyproject.toml. The regex used to validate that version string (^black([^A-Z0-9.\-]+.)$ with re.IGNORECASE) is overly permissive, allowing…
Patched 2026-07-05 - CVE-2026-23947 misc HIGH
Orval OpenAPI Codegen Arbitrary Code Execution via Malicious Spec (CVE-2026-23947)
Orval generates TypeScript client code from OpenAPI specifications, and it copies certain vendor-extension fields — specifically x-enumDescriptions and x-enumNames — directly into generated source as comments/string literals without escaping. By crafting an…
Patched 2026-07-05 - CVE-2026-7482 misc MEDIUM
Ollama GGUF Heap Out-of-Bounds Read During Quantization — CVE-2026-7482
Ollama versions prior to 0.17.1 do not validate that a GGUF model file's declared tensor size matches the actual bytes present in the file. By crafting a GGUF file whose tensor metadata declares a much larger shape than the data actually written, and then…
Patched 2026-07-05 - CVE-2026-2395 misc MEDIUM
npm `tar` Package Unicode-Normalization Race Condition / File Collision (CVE-2026-2395)
The tar npm package's parallel-extraction mode (jobs > 1) is vulnerable to a race condition rooted in Unicode normalization differences: filenames like collisionss and collisionß can be treated as the same target path due to case/normalization handling, even…
Unverified 2026-07-05 - CVE-2026-29786 misc HIGH
Node.js `tar` Package Symlink Path Traversal — CVE-2026-29786
The tar package's extraction engine does not sufficiently validate destination paths when an archive entry is of type symlink. An attacker can craft a tarball containing a symlink entry that points outside the intended extraction directory (e.g. to…
Patched 2026-07-05 - CVE-2026-23745 / GHSA-8qq5-rm4j-mr97 misc HIGH
node-tar Hardlink/Symlink Path Traversal Arbitrary File Overwrite (CVE-2026-23745)
node-tar fails to sanitize absolute paths supplied in the linkpath field of hardlink and symlink tar entries. In src/unpack.ts, the library resolves the link target with path.resolve(this.cwd, String(entry.linkpath)), but path.resolve() ignores the base cwd…
Patched 2026-07-05 - CVE-2026-58138 misc CRITICAL 9.8
Netflix Conductor Unauthenticated RCE via INLINE GraalVM Evaluator — CVE-2026-58138
Conductor evaluates user-supplied JavaScript (and Python) expressions in INLINE (and related LAMBDA/DOWHILE/SWITCH) workflow tasks using a GraalVM polyglot context built with full host access (HostAccess.ALL / allowAllAccess(true)). Because the community REST…
Patched 2026-07-05 - CVE-2026-8161 / GHSA-qxch-whhj-8956 misc MEDIUM
Multiparty Denial of Service via Prototype-Pollution Field Name (CVE-2026-8161)
multiparty@4.2.3 and earlier store parsed multipart field names and files in plain JavaScript objects and rely on ordinary property lookup (fields[name], files[name]) to detect whether a field has been seen before. Because plain-object lookups traverse the…
Patched 2026-07-05 - CVE-2026-26030 misc CRITICAL
Microsoft Semantic Kernel In-Memory Vector Store Filter eval() Sandbox Bypass RCE (CVE-2026-26030)
CVE-2026-26030 is a sandbox-bypass remote code execution vulnerability in Semantic Kernel's in-memory vector store search filter evaluation. Agents that expose a search/query tool backed by InMemoryCollection let the LLM emit a filter expression string (e.g.…
Patched 2026-07-05 - CVE-2026-21509 misc HIGH KEV EPSS 72%
Malicious DOCX/OLE CLSID Object Embedding Builder (CVE-2026-21509)
CVE-2026-21509 concerns Microsoft Word's handling of embedded OLE objects referencing attacker-chosen COM CLSIDs inside a .docx package. The included PoC is a pure-Python builder that assembles a syntactically valid OOXML .docx package containing a minimal…
Unverified 2026-07-05 - CVE-2026-6130 misc MEDIUM
local-mcp exec Tool Sandbox/Restriction Bypass (CVE-2026-6130)
This is not a standalone PoC script but the actual local-mcp MCP server codebase, whose exec tool contains the real CVE-2026-6130 bypass: a workaround using a generated batch file plus base64 encoding that circumvents intended command-execution restrictions…
Unverified 2026-07-05 - CVE-2026-30952 misc HIGH 8.7
LiquidJS Template Engine Path Traversal — CVE-2026-30952
LiquidJS's layout, render, and include tags can resolve absolute file paths even when a root directory restriction is configured, because the library's fallback path-resolution logic does not properly verify that the resolved path stays within the configured…
Patched 2026-07-05 - CVE-2026-28995 misc HIGH
iOS App Intents Path Traversal — CVE-2026-28995
Apple's App Intents framework insufficiently validates file paths supplied to an intent's handler, allowing a malicious app to read arbitrary files outside its normal app sandbox. The PoC defines an AppIntent whose readCve(path:) function prepends a long…
Patched 2026-07-05 - CVE-2026-56121 misc CRITICAL 9.8
Feast Registry gRPC Unauthenticated RCE via dill.loads — CVE-2026-56121
Feast's registry gRPC server deserializes the user-defined function (UDF) body of an OnDemandFeatureView with dill.loads() (a pickle superset) the moment a spec is received via the ApplyFeatureView RPC — before any permission check runs. Because the default…
Patched 2026-07-05 - CVE-2026-43893 / GHSA-cw26-7653-2rp5 misc HIGH 8.2
exiftool-vendored.js Argument Injection via Newline-Delimited Tag Names (CVE-2026-43893)
exiftool-vendored sends caller-supplied strings (tag names in the object passed to exiftool.write(), filenames, and other options) to the underlying ExifTool process via stdin, one argument per line, without filtering embedded newline/carriage-return/NUL…
Patched 2026-07-05 - CVE-2026-24009 misc HIGH
docling-core Unsafe YAML Deserialization Leading to Code Execution — CVE-2026-24009
docling-core's DoclingDocument.loadfromyaml() deserializes YAML using yaml.load(f, Loader=yaml.FullLoader) rather than a safe loader. When paired with a vulnerable PyYAML version (< 5.4, related to CVE-2020-14343), a crafted YAML document can trigger code…
Patched 2026-07-05 - CVE-2026-54316 misc MEDIUM
Claude Code WebFetch Hardcoded HuggingFace Bare-Hostname Allow-List Bypass — CVE-2026-54316
CVE-2026-54316 (GHSA-fg94-h982-f3mm) is a permission-prompt bypass in Claude Code's WebFetch tool: versions from 0.2.54 up to (but not including) 2.1.163 hardcoded huggingface.co as a bare, pre-approved hostname, so any path on that domain — including…
Patched 2026-07-05 - CVE-2026-23842 misc HIGH 7.5
ChatterBot Denial of Service via SQLAlchemy Connection Pool Exhaustion (CVE-2026-23842)
ChatterBot's default SQLAlchemy storage adapter uses an unbounded/default QueuePool configuration with no concurrency throttling, request rate limiting, or explicit session lifecycle management. When many threads call getresponse() concurrently, each checks…
Patched 2026-07-05 - CVE-2026-39973 misc HIGH
Apktool Resource Table Path Traversal — Malicious APK Builder (CVE-2026-39973)
Apktool decodes an APK's resources.arsc to reconstruct resource file paths during decompilation, and a security regression (commit e10a045, PR #4041) removed the BrutIO.detectPossibleDirectoryTraversal() check that previously validated the fully-built output…
Patched 2026-07-05 - CVE-2026-22807 misc HIGH
AI Model-Loader `trust_remote_code` Order-of-Operations RCE Simulation (CVE-2026-22807)
This repository is a small, self-contained Python testbed (vulnerablelib.py) that reproduces a class of AI supply-chain vulnerability found in model-loading frameworks: when a loader resolves a model's Python class via a config.json's automap field, it can…
Patched 2026-07-05 - CVE-2026-3462 misc CRITICAL
Adobe Acrobat/Reader PDF Exploit Generator — Claimed Prototype Pollution (CVE-2026-3462)
This repository is titled and described as a PoC for "Acrobat Reader Improperly Controlled Modification of Object Prototype Attributes (Prototype Pollution)" under CVE-2026-3462, but the actual shipped code (poc.py / cve202634621advanced.py, both identical)…
Patched 2026-07-05 - None assigned as of 2026-07-03 misc HIGH
7-Zip RAR5 Mark-of-the-Web / ADS Full-Chain Bypass
7-Zip 26.01 on Windows mishandles RAR5 archives that contain crafted STM (stream) service records alongside a normal file entry. By naming one stream ::$DATA and another :Zone.Identifier:$DATA, an attacker can make the archive-provided data silently override…
Unverified 2026-07-03 - CVE-2025-8088 misc HIGH 8.4 KEV Ransomware EPSS 95%
WinRAR Windows Path Traversal via NTFS Alternate Data Streams (CVE-2025-8088)
CVE-2025-8088 is a path traversal vulnerability in the Windows version of WinRAR. A specially crafted RAR archive abuses NTFS Alternate Data Streams (ADS) combined with ..\ traversal sequences so that, when opened or extracted by a vulnerable WinRAR build,…
Patched 2026-07-01 - CVE-2026-45585 misc MEDIUM 6.1
YellowKey — BitLocker Bypass via WinRE autofstx.exe (CVE-2026-45585)
CVE-2026-45585 (YellowKey) is a zero-day physical-access vulnerability discovered in May 2026 that allows an attacker with physical access to a Windows 11 device to fully bypass BitLocker disk encryption without the PIN, password, or recovery key. The…
Patched 2026-06-26 - CVE-2025-30065 misc CRITICAL 10 EPSS 41%
Apache Parquet Java Unsafe Deserialization RCE (CVE-2025-30065)
CVE-2025-30065 is an unsafe deserialization issue in Apache Parquet Java schema handling that can instantiate attacker-controlled classes while parsing malicious Parquet/Avro metadata. The provided PoC demonstrates two practical outcomes: arbitrary command…
Patched 2026-05-16 - CVE-2025-6218 misc HIGH KEV EPSS 89%
WinRAR Archive Extraction Path Traversal (CVE-2025-6218)
This PoC demonstrates CVE-2025-6218 in WinRAR, where a crafted archive extraction path can place files outside the intended destination directory. The provided batch script builds a ZIP archive that writes a .bat file into the current user's Startup folder.…
Unverified 2026-05-15