CVE-2026-113303

Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113271

Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113072

A memory corruption vulnerability in the CSS component of Google Chrome (versions prior to 156.0.8078.47 ) allows a remote attacker to potentially execute arbitrary code outside the sandbox through a crafted HTML page. The vulnerability is associated with CWE-119 (Improper Restriction of Operatio...

CVE-2026-113280

A memory corruption vulnerability in the Paint component of Google Chrome (prior to version 156.0.8078.47) allows a remote attacker to execute arbitrary code inside the sandbox. This can be triggered by viewing a crafted HTML page . The issue was reported by Xinyang Ge on 2026-10-06 and is addres...

CVE-2026-113271

A Use after free vulnerability exists in the Accessibility component of Google Chrome prior to version 156.0.8078.47 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . The vulnerability was reported by Xinyang Ge (Anthropic) . ...

CVE-2026-113303

A memory corruption vulnerability in WebRTC within Google Chrome versions prior to 156.0.8078.47 allows a remote attacker to potentially execute arbitrary code inside the sandbox. The vulnerability can be triggered via a crafted HTML page . Remediation is available in version 156.0.8078.47 for Wi...

CVE-2026-113279

Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-113279

A memory corruption vulnerability exists in the Accessibility component of Google Chrome prior to version 156.0.8078.47 . A remote attacker could exploit this by navigating to a crafted HTML page to potentially execute arbitrary code within the sandbox. This issue was reported by Xinyang Ge on 20...

cacti-rce-cve-2022-46169-vulnerable-application

Cacti v1.2.22 command injection CVE-2022-46169 vulnerable application This is a vulnerable application to test the exploit for the Cacti vulnerability CVE-2022-46169. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended using a backed-up...

python-log4rce

Python Log4RCE An all-in-one pure Python3 PoC for CVE-2021-44228. Sample python3 log4rce.py --target "linux" --payload "PAYLOAD" http -X POST --url "http://localhost:8080/" --data "address=" INFO:HTTP:Running on local port 1337 INFO:HTTP:Remote target is http://127.0.0.1:1337/LinuxExploit.class...

CVE-2026-34197

CVE-2026-34197 Apache ActiveMQ Remote Code Execution via Jolokia API Overview • Details...

tplmap

Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...

CVE-2025-49844

CVE-2025-49844 – Use-After-Free Issue in Redis's Lua Parser In short and simple terms, you run this script and instead of localhost you provide the target IP and configure its port, it connects if it is vulnerable, and you can execute any command you want. In Shodan, you can also find vulnerable...

CVE-2019-15107-RCE-WebMin

Webmin CVE-2019-15107 Detection A lightweight Python script that fingerprints Webmin versions and flags any server running 1.882 ≤ version ≤ 1.920 as potentially vulnerable to CVE-2019-15107. This tool does not exploit the vulnerability—only reports it. Prerequisites Git Python 3.7+ Docker & Dock...

CVE-2024-4577

CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi 🍊 This vulnerability was found b...

XworkStruts-RCE

XworkStruts-RCE CVE-2017-5638 XworkStruts RCE Vuln test script The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrar...

EUVD-2016-10918

Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value...

CVE-2016-20101

The Issuu Panel plugin for WordPress (versions prior to 1.6.6 ) is vulnerable to a PHP file inclusion vulnerability. An unauthenticated attacker can exploit the abspath parameter via a GET request to menu/documento/requests/ajax-docs.php. By providing a crafted value, the attacker can trigger the...

CVE-2019-19781

CVE-2019-19781 Remote Code Execution RCE in Citrix Application Delivery Controller and Citrix Gateway A vulnerability has been identified in Citrix Application Delivery Controller ADC formerly known as NetScaler ADC and Citrix Gateway formerly known as NetScaler Gateway that, if exploited, could...

Rig-Exploit-for-CVE-2018-8174

Rig-Exploit-for-CVE-2018-8174 Rig Exploit for CVE-2018-8174 As with its previous campaigns, Rig’s Seamless campaign uses malvertising. In this case, the malvertisements have a hidden iframe that redirects victims to Rig’s landing page, which includes an exploit for CVE-2018-8174 and shellcode. Th...