xooxo

3 exploits Active since Aug 2019
CVE-2019-14745 NOMISEC HIGH WORKING POC
radare2 < 3.7.0 - Command Injection via Crafted Executable Symbol Names
In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of symbol names embedded in executables.
2 stars
CVSS 7.8
CVE-2026-35250 NOMISEC LOW WORKING POC
Oracle VM VirtualBox 7.2.6 - Authenticated Partial Denial of Service
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 2.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).
CVSS 2.3
CVE-2025-40019 NOMISEC WORKING POC
Linux Kernel 5.4.0-6.17.3 - DoS via ESSIV AEAD Cryptographic Operation
In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.