CVE-2026-113107

A flaw was found in chromium-browser. A memory management issue known as a use-after-free flaw exists in the Media component. By convincing a user to open a specially crafted HTML page, a remote attacker could exploit this vulnerability to execute arbitrary code within the browser's restricted...

CVE-2026-113168

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the browser's sandbox environment by convincing a user to visit a specially crafted HTML page. This vulnerability is caused by a use-after-free memory issue in the Permissions component...

CVE-2026-113155

A flaw was found in the Glic component of chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code within the application sandbox by convincing a user to visit a specially crafted HTML page. The issue is caused by a use-after-free memory corruption condition during...

CVE-2026-113141

A flaw was found in chromium-browser. A use-after-free vulnerability in the Transactions Platform allows a remote attacker to execute arbitrary code inside the sandbox by enticing a user to visit a crafted HTML page. This issue occurs when the application accesses memory after it has been release...

CVE-2026-113119

A flaw was found in chromium-browser. A use-after-free memory corruption issue in the Network component allows a remote attacker to execute arbitrary code within the browser sandbox. To exploit this vulnerability, an attacker must trick a user into visiting a specially crafted HTML page...

CVE-2026-113065

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the browser sandbox by enticing a user to load a specially crafted HTML page. The issue is caused by a use-after-free condition within the Media component...

CVE-2026-113042

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, potentially leading to arbitrary code execution within the browser's sandbox environment. This issue is caused by a use-after-free memory management...

CVE-2026-113014

A flaw was found in chromium-browser. A use-after-free vulnerability exists in the PerformanceAPIs component, which occurs when memory is accessed after it has already been released. A remote attacker could exploit this flaw by enticing a user to view a specially crafted HTML page, potentially...

CVE-2026-113015

A flaw was found in chromium-browser. Due to improper memory handling a use-after-free condition within the Workers component, a remote attacker can execute arbitrary code inside the browser's sandbox environment. To exploit this vulnerability, the attacker must convince a user to load a speciall...

CVE-2026-113009

A flaw was found in Chromium's WindowControlsOverlay component. A remote attacker could trick a user into visiting a crafted HTML page to trigger a use-after-free memory condition. Successful exploitation allows the attacker to execute arbitrary code within the browser sandbox...

exploit-CVE-2022-24780

iTop RCE via SSTI - CVE-2022-24780 exploit iTop --debug exploit.rb light --debug exploit.rb -h | --help full: exploit with an emulated browser, execute JavaScript, preserve original user profile information light: just parse HTML and send requests, no JavaScript, DESTRUCTIVE reset user informatio...

cve-2026-40176-cve-2026-40261

CVE-2026-40176 Composer Perforce Repository Remote Code Execution RCE 📋 Summary Command Injection vulnerability in Composer's Perforce repository driver allowing Remote Code Execution RCE through insufficient input validation in repository URL processing. 🎯 Vulnerability Details Property| Value...

PT-2026-120748

Name of the Vulnerable Software and Affected Versions YOOtheme Pro versions prior to 5.0.53 Description An issue exists that allows an unauthenticated attacker to achieve remote code execution through the image handler. Recommendations Update to version 5.0.53...

VulnCheck KEV: CVE-2024-39930

The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution. Authenticated attackers can exploit this by opening an SSH connection and sending a malicious --split-string env request if the built-in SSH server is activated...

PT-2026-120238

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif...

PT-2026-120762

The quiet one in the Node.js batch is CVE-2026-106074. If you ship a single executable app or use a startup snapshot, the random caches behind crypto.randomUUID and randomInt got baked into the build, so every process hands out the same values. Upgrading Node on the server doesn't undo that...

Linux Distros Unpatched Vulnerability : CVE-2026-94300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Replaying GSS-TSIG signed UDP messages can result in memory corruption in named. An attacker who can capture a previously signed UDP message can replay it while...

Rocky Linux 9.6 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792602059)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792602059 advisory. - PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may n...

Linux Distros Unpatched Vulnerability : CVE-2026-109618

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this...

VulnCheck KEV: CVE-2026-109618

PHP uses longjmp for out-of-memory OOM errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The subsequent request cleanup procedure may re...