PoC Archive PoC Archive

tag

Dos

Windows Message Queuing (MSMQ) Queue Manager Heap-Based Buffer Overflow (CVE-2026-54992)
CVE-2026-54992 network Patched
CVE-2026-54992networkHIGH 8.4Patched2026-07-27XRING — XQUIC QPACK Ring Buffer Resize Underflow (Remote Unauthenticated DoS)
network Unpatched
—networkCRITICALUnpatched2026-07-08Tenda AC9 `AdvSetMacMtuWan` Stack-Based Buffer Overflow (CVE-2025-29384)
CVE-2025-29384 network Unpatched
CVE-2025-29384networkCRITICAL 9.8Unpatched2026-07-06Windows HTTP.sys Header-Count-Triggered Kernel Memory Corruption / BSOD (CVE-2026-49160) EPSS 54%
CVE-2026-49160 binary Patched
CVE-2026-49160binaryHIGHPatched2026-07-05VirtualBox DevVGA_VBVA Integer Overflow leading to Guest-Triggerable DoS (CVE-2026-35250)
CVE-2026-35250 binary Unverified
CVE-2026-35250binaryLOW 2.3Unverified2026-07-05Tenda HG7/HG9/HG10 Router Stack-Based Buffer Overflow — CVE-2026-11499
CVE-2026-11499 network Unverified
CVE-2026-11499networkHIGHUnverified2026-07-05strongSwan RADIUS Attribute-Iterator Pre-Auth Infinite Loop / Remote DoS (CVE-2026-35333)
CVE-2026-35333 network Unverified
CVE-2026-35333networkMEDIUMUnverified2026-07-05PJSIP / PJNATH ICE Session Stack Buffer Overflow via SDP ice-ufrag (CVE-2026-25994)
CVE-2026-25994 network Patched
CVE-2026-25994networkHIGHPatched2026-07-05PgBouncer SASL Length Field Integer Overflow Crash — CVE-2026-6664
CVE-2026-6664 network Patched
CVE-2026-6664networkHIGHPatched2026-07-05Perfmatters WordPress Plugin Arbitrary File Deletion (CVE-2026-4350)
CVE-2026-4350 web Unverified
CVE-2026-4350webHIGH 8.1Unverified2026-07-05OpenBSD slaacd/rad Infinite Loop via Malformed ND Option (CVE-2026-41285)
CVE-2026-41285 network Patched
CVE-2026-41285networkHIGHPatched2026-07-05Notepad++ nativeLang.xml Format String Crash / Info Disclosure — CVE-2026-3008
CVE-2026-3008 binary Unverified
CVE-2026-3008binaryMEDIUMUnverified2026-07-05Nginx QUIC/HTTP-3 DCID Length Heap Overflow Lab (CVE-2026-0211)
CVE-2026-0211 (repository explicitly labels this as a hypothetical/simulated CVE for coursework, not a confirmed vendor-assigned vulnerability) web Unverified
CVE-2026-0211webHIGHUnverified2026-07-05Multer Orphaned Temporary File Disk-Exhaustion DoS — CVE-2026-3304
CVE-2026-3304 web Patched
CVE-2026-3304webHIGH 8.7Patched2026-07-05MiniTool pwdrvio.sys Kernel Driver Buffer Overflow — Local DoS/BSOD (CVE-2026-36980)
CVE-2026-36980 binary Patched
CVE-2026-36980binaryMEDIUMPatched2026-07-05Django MultiPartParser Base64 Whitespace CPU Amplification DoS — CVE-2026-33033
CVE-2026-33033 web Patched
CVE-2026-33033webMEDIUMPatched2026-07-05Casdoor Authenticated Path Traversal to Arbitrary File Write (CVE-2026-6815)
CVE-2026-6815 web Unverified
CVE-2026-6815webHIGHUnverified2026-07-05BIRD/BIRD2 BGP AS_PATH Mask Matching Stack Buffer Overflow (CVE-2026-49943)
CVE-2026-49943 network Patched
CVE-2026-49943networkHIGH 3.1Patched2026-07-05Netlogon CLDAP Stack Buffer Overflow (CVE-2026-41089) EPSS 80%
CVE-2026-41089 network Patched
CVE-2026-41089networkCRITICAL 9.8Patched2026-06-04Notepad++ <= 8.9.6 Multiple Vulnerabilities (CVE-2026-48770, CVE-2026-48778, CVE-2026-48800)
CVE-2026-48770, CVE-2026-48778, CVE-2026-48800 binary Patched
CVE-2026-48770, CVE-2026-48778, CVE-2026-48800binaryHIGH 5Patched2026-05-28Next.js RSC Server-Action DoS via Flight Deserialization (CVE-2026-23870)
CVE-2026-23870 web Patched
CVE-2026-23870webHIGH 7.5Patched2026-05-17Next.js Image Optimization API OOM DoS (Self-Hosted) (CVE-2026-44577)
CVE-2026-44577 web Patched
CVE-2026-44577webMEDIUM 5.9Patched2026-05-17Next.js Cache Components Connection Exhaustion DoS (CVE-2026-44579)
CVE-2026-44579 web Patched
CVE-2026-44579webHIGH 7.5Patched2026-05-17LDAP Nightmare — Windows LDAP Client RCE/DoS (CVE-2024-49113) EPSS 83%
CVE-2024-49113 network Patched
CVE-2024-49113networkCRITICALPatched2026-05-15