PT-2026-81754

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A use after free issue in Chromoting allows a remote attacker to execute arbitrary code outside the sandbox by sending crafted network traffic. Use after free is a memory corruption fla...

FreeBSD -- Multiple vulnerabilities in ppp(8)

Problem Description: ppp8 contained three memory safety errors in its handling of multilink endpoint discriminator options. mpEnddisc used incorrect length calculations when formatting endpoint discriminator addresses for display, allowing a received endpoint option to overflow a global result...

PT-2026-81394

The Kaltura HTML5 player mwEmbed / html5lib contains an unauthenticated remote code execution vulnerability caused by unsafe data deserialization and unsanitized filesystem path construction. mwEmbedLoader.php accepts a user‑controlled ServiceUrl, whose response is passed to unserialize, and the...

PT-2026-81522

Buffer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

AlmaLinux 8 : gstreamer1-plugins-good (ALSA-2026:59179)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59179 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution vi...

VulnCheck KEV: CVE-2026-66066

Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...

UBUNTU-CVE-2026-71513

NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables outside the allowlisted namespace. Attackers can craft...

PT-2026-81633

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 152.0.7977.65 Description A use after free issue exists where a remote attacker can execute arbitrary code outside the sandbox by sending crafted network traffic. Use after free is a memory corruption fla...

RHEL 10 : gstreamer1-plugins-good (RHSA-2026:59133)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59133 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages...

RockyLinux 10 : gstreamer1-plugins-good (RLSA-2026:59133)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59133 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution...

RockyLinux 9 : gstreamer1-plugins-good (RLSA-2026:59152)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:59152 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution v...

PT-2026-81728

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

PT-2026-81727

Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-81276

Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.3 Description Allowlisted pickle loaders trust entire module namespaces instead of specific safe callables. This allows attackers to craft malicious pickle payloads that use the pickle REDUCE mechanism to invoke...

check-react-rce-cve-2025-55182

React RCE Sicherheitslücken-Scanner CVE-2025-55182 Ein umfassendes Sicherheits-Scan-Tool zur Erkennung von CVE-2025-55182 und CVE-2025-66478 Sicherheitslücken in React- und Next.js-Projekten, die React Server Components RSC verwenden. 🚨 Übersicht Dieses Tool scannt Ihr Projekt nach anfälligen...

CVE-2024-4577-PHP-RCE

PHP RCE PoC CVE-2024-4577: Argument-Injektion in PHP-CGI Übersicht Dieses Repository enthält Skripte, um die Schwachstelle CVE-2024-4577 zu prüfen, eine Argument-Injektionsschwachstelle in PHP-CGI. Du kannst die bereitgestellten Bash-, Go- und Python-Skripte verwenden, um eine Liste von Domänen a...

ShellEvil

ShellEvil Jonatas Fil Dkr Julio Della Flora Thiago Sena THX CVE-2013-225 S2-016 के लिए Struts 2 DefaultActionMapper इंटरैक्टिव शेल शोषण Struts 2 DefaultActionMapper पैरामीटरों को "action:" या "redirect:" के साथ उपसर्ग करके शॉर्ट-सर्किट नेविगेशन स्थिति परिवर्तनों का समर्थन करता है, जिसके बाद एक...

CVE-2024-4879-ServiceNow

CVE-2024-4879-ServiceNow ServiceNow è una piattaforma per la trasformazione aziendale che aiuta le aziende a gestire i flussi di lavoro digitali per le operazioni enterprise. CVE-2024-4879 potrebbe permettere a un utente non autenticato di eseguire codice in remoto all'interno della piattaforma...

CVE-2021-40964

Tiny File Manager = 2.4.6 - Esecuzione Remota di Codice Autenticato 🚨 Informazioni sull'Exploit Questo è un exploit Esecuzione Remota di Codice RCE autenticato basato su Bash per Tiny File Manager versioni = 2.4.6, vulnerabile sotto CVE-2021-40964. Lo script sfrutta: Validazione debole del...

CVE-2025-3248

CVE-2025-3248 Esecuzione di codice remoto utilizzando un endpoint API vulnerabile — Proof of Concept. Info: ⚠️ Usalo a tuo rischio! ❓ Aggiunta opzione per reverse shell. ✅ Nuovo tentativo automatico se validatecode è disattivato. Dimostrazione Utilizzo root@kitploit: python CVE-2025-3248.py /...