Kağan Çapar

15 exploits Active since Jan 2026
CVE-2026-5201 NOMISEC HIGH WORKING POC
Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
CVSS 7.5
CVE-2019-25677 EXPLOITDB MEDIUM perl WORKING POC
WinRAR 5.61 Denial of Service via Malformed Language File
WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the test button, causing an access violation at memory address 004F1DB8 when the application attempts to read invalid data.
CVSS 6.2
CVE-2021-47881 EXPLOITDB HIGH python WORKING POC
dataSIMS Avionics ARINC 664-1 <4.5.3 - Buffer Overflow
dataSIMS Avionics ARINC 664-1 version 4.5.3 contains a local buffer overflow vulnerability that allows attackers to overwrite memory by manipulating the milstd1553result.txt file. Attackers can craft a malicious file with carefully constructed payload and alignment sections to potentially execute arbitrary code on the Windows system.
CVSS 8.4
EIP-2026-119528 EXPLOITDB python WORKING POC
HTML Video Player 1.2.5 - Buffer-Overflow (SEH)
EIP-2026-119544 EXPLOITDB perl WORKING POC
Modbus Slave PLC 7 - '.msw' Buffer Overflow (PoC)
EIP-2026-119529 EXPLOITDB python WORKING POC
HTML Video Player 1.2.5 - Buffer-Overflow (SEH)
EIP-2026-117291 EXPLOITDB ruby WORKING POC
HTML5 Video Player 1.2.5 - Buffer Overflow (Metasploit)
EIP-2026-117292 EXPLOITDB ruby WORKING POC
HTML5 Video Player 1.2.5 - Buffer Overflow (Metasploit)
EIP-2026-114947 EXPLOITDB perl WORKING POC
Audacity 2.3 - Denial of Service (PoC)
EIP-2026-110680 EXPLOITDB text WORKING POC
PHP Dashboards NEW 5.5 - 'email' SQL Injection
EIP-2026-109901 EXPLOITDB text WORKING POC
New STAR 2.1 - SQL Injection / Cross-Site Scripting
EIP-2026-107503 EXPLOITDB text WORKING POC
Grid Pro Big Data 1.0 - SQL Injection
EIP-2026-106257 EXPLOITDB text WORKING POC
CSV Import & Export 1.1.0 - SQL Injection / Cross-Site Scripting
EIP-2026-102584 EXPLOITDB python WORKING POC
FileZilla 3.33 - Buffer Overflow (PoC)
EIP-2026-102583 EXPLOITDB python WORKING POC
FileZilla 3.33 - Buffer Overflow (PoC)