CVE-2026-79043

Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79142

Buffer overflow in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79111

Improper input validation in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79130

Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79130

CVE-2026-79130 is a buffer overflow in ANGLE , the OpenGL ES translation layer used by Google Chrome, prior to version 152.0.7977.65 (Windows/Mac) and 152.0.7977.64 (Linux). A remote attacker can trigger the flaw via a crafted HTML page , leading to arbitrary code execution outside the browser sa...

CVE-2026-79187

CVE-2026-79187 is a use-after-free vulnerability in the WebRTC component of Google Chrome prior to version 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page , leading to arbitrary code execution inside the browser sandbox , potentially enabling furth...

CVE-2026-79202

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79257

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-79194

Use after free in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-79194

CVE-2026-79194 is a use-after-free vulnerability in Chromoting , a component of Google Chrome on Windows prior to version 152.0.7977.65 . A remote attacker can execute arbitrary code outside the browser sandbox by sending crafted network traffic to a vulnerable system. The Chromium team rated thi...

CVE-2026-78939

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2025-47916

CVE-2025-47916 - Vulnerabilità di esecuzione remota di codice RCE in Invision Community Informazioni Questo repository fornisce una descrizione proof-of-concept per CVE‑2025‑47916 , una vulnerabilità di esecuzione remota di codice che interessa le versioni da 5.0.0 a 5.0.6 di Invision Community. ...

CVE-2026-79290

A use after free vulnerability in the Aura component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML page. The bug was internally reported by Google on 2026-05-25 (Chromium bug 5164...

CVE-2026-79290

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79290

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79052

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

FULL-ANALYSIS---CVE-2026-45829-ChromaDB-

CVE-2026-45829 - ChromaDB Pre-Auth RCE CVSS 10.0 ⚠️ AVVERTENZA Questo repository contiene una PoC FUNZIONALE per CVE-2026-45829. SOLO per test autorizzati in ambienti controllati. Descrizione Vulnerabilità critica in ChromaDB versioni 1.0.0 a 1.5.8 che consente a un attaccante non autenticato di...

discuz-ml-rce

discuz-ml-rce Sistemas e versões afetados: Discuz!ML V3.2-3.4 Discuz!x V3.2-3.4 Causa da vulnerabilidade: o sistema Discuz!ML não filtra o conteúdo do parâmetro language recebido pelo campo l no cookie, resultando em concatenação de strings e, consequentemente, execução de código PHP. Nos campos ...

CVE-2026-45018 Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution

Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the POST /mcp endpoint without requiring authentication. For stdio transport, the...

PAN-OS-CVE-2024-3400-Command-Injection-Investigation

Indagine su un tentativo di command injection PAN-OS CVE-2024-3400 Panoramica Questo progetto documenta l'indagine su un tentativo di command injection CVE-2024-3400 rivolto a un servizio PAN-OS GlobalProtect. L'obiettivo era determinare: se si tratti di un attacco reale se l'esecuzione di comand...