DEBIAN-CVE-2026-78899

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-78891

Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-51368

An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code via a crafted request to the console/heimdall endpoint...

CVE-2025-55182

CVE-2025-55182 Scanner e Laboratorio di Exploit Questo repository contiene uno scanner completo e uno strumento di exploit per CVE-2025-55182 , una vulnerabilità critica di Remote Code Execution RCE nei React Server Components RSC. Include inoltre un realistico "Ambiente di Laboratorio" per testa...

CVE-2025-13374

Kalrav AI Agent = 2.3.3 - Caricamento Arbitrario di File non Autenticato tramite Azione AJAX kalravuploadfile Il plugin WordPress Kalrav AI Agent versione 2.3.3 e precedenti contiene una vulnerabilità di caricamento arbitrario di file che consente a utenti non autenticati di caricare file PHP...

CVE-2025-55182-Terminal

Scanner de Vulnerabilidade RSC do Next.js CVE-2025-66478 / CVE-2025-55182 Uma ferramenta leve e multithread de Prova de Conceito PoC projetada para detectar e demonstrar a vulnerabilidade de Execução Remota de Código nos React Server Components RSC do Next.js React2Shell. Esta ferramenta permite...

CVE-2026-80104 DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename

DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skillupload in packages/dbgpt-app/src/dbgptapp/openapi/apiv1/agenticdataapi.py takes file.filename as given and writes the request body to uploaddir / filename. A...

CVE-2026-80104 DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename

DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. skillupload in packages/dbgpt-app/src/dbgptapp/openapi/apiv1/agenticdataapi.py takes file.filename as given and writes the request body to uploaddir / filename. A...

CVE-2026-80104

DB-GPT 0.8.0 is affected by a path traversal vulnerability in the skill_upload endpoint (in agentic_data_api.py). The function constructs the destination path using the multipart filename directly via the / operator without canonicalization or a containment check under the upload directory. An ab...

CVE-2025-55182-react2shell

react2shell CVE-2025-55182 Toolkit. Scanner + Exploit für unauthorisierte RCE in Next.js via RSC-Payload-Injection. Node.js Exploit: keine Abhängigkeiten. Bash-Scanner: prüft einzelne URLs oder Bulk-Listen. Exploit root@kitploit: Single command with output ./react2shell.mjs -t http://target:3000 ...

EUVD-2026-66065

Use after free in Animation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79056

A use-after-free flaw in the ServiceWorker component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The CVSS 3.1 score is 9.6 (Critical) with a changed scope, requiring user inte...

CVE-2026-78963

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79097

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78913

Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-78913

Use after free in Chromoting in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-78951

A use-after-free vulnerability in the ServiceWorker component of Google Chrome prior to 152.0.7977.65 allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML page. Chromium classifies the severity as Medium , while the NVD/CNA-assigned C...

CVE-2026-79230

Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-65875

Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

RCE-Exploit-Framework

RCE-Exploit-Framework Dieses Framework wurde entwickelt, um Penetrationstestern oder Entwicklern zu helfen, die Mechanik von Remote Code Execution RCE-Exploits zu verstehen. Features Payload-Generator : Unterstützt die Erstellung benutzerdefinierter Payloads auf Basis von Python, Bash und PHP...