333399 matches found
WordPress 7.0.1 REST API Batch Route Confusion Remote Code Execution
WordPress versions 6.9.0 through 6.9.4 and 7.0.0 through 7.0.1 contain a REST API batch-route confusion issue which, when combined with SQL injection, can lead to remote code execution. https://packetstorm.news/download/237893...
PT-2026-127292
Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...
PT-2026-127276
Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-127290
Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-127283
Improper input validation in Metrics in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-127256
Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
Google Chrome Vulnerability: CVE-2026-118306
Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
Google Chrome Vulnerability: CVE-2026-118342
Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
Juniper Junos OS Evolved 25.4 PTX Series Unauthenticated Remote Code Execution
Juniper Junos OS Evolved on PTX Series versions before 25.4R1-S1-EVO and 25.4R2-EVO contain an unauthenticated remote code execution vulnerability. The supplied proof of concept creates and executes a command through the affected configuration API. https://packetstorm.news/download/237898...
PHP 8.5.11 Session Upload Progress Remote Code Execution
PHP versions through 8.5.11 contain session.uploadprogress OOM-corruption and stale-global-state vulnerabilities that can lead to remote code execution. Included is a proof of concept with passive fingerprinting and local Docker lab support. https://packetstorm.news/download/237904...
GitLab 19.4.1 CI/CD Regular Expression Remote Code Execution
GitLab versions 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 contain an integer overflow in CI/CD regular expression handling that can allow remote code execution. Includes a proof of concept. https://packetstorm.news/download/237901...
SPIP 4.4.19 Remote Code Execution
SPIP versions before 4.4.20 contain an unauthenticated remote code execution vulnerability. The supplied proof of concept delivers PHP code through the search parameter and attempts to write command and upload shells to successful targets. https://packetstorm.news/download/237890...
Microsoft Windows SMBv1 Remote Code Execution
This document provides a proof of concept workflow for identifying vulnerable Microsoft Windows SMBv1 hosts and exploiting the MS17-010 EternalBlue vulnerability with Metasploit. https://packetstorm.news/download/237889...
SPIP 4.4.19 and Earlier Remote Code Execution
SPIP versions before 4.4.20 contain an unauthenticated remote code execution vulnerability related to PHP block identification and varexport handling. The included proof of concept detects affected targets and deploys command execution and file-upload PHP shells...
Langflow 1.12.4 Authenticated Remote Code Execution
Langflow versions 1.0.0 through 1.12.4 contain a missing authorization issue in the authenticated A2A JSON-RPC execution path that allows an authenticated user to execute arbitrary code by bypassing execution gates. https://packetstorm.news/download/237876...
Kestra 1.3.20 Authentication Bypass / Remote Code Execution
Kestra version 1.3.20 contains an authentication-filter bypass that permits unauthenticated workflow creation and execution through a path ending in /configs, resulting in command execution inside the worker container. https://packetstorm.news/download/237872...
PHP 8.5.11 Remote Code Execution
PHP version 8.5.11 contains an out-of-memory handling flaw that can result in remote code execution. The included proof of concept targets Apache modphp prefork deployments using multipart requests and session-state disclosure. https://packetstorm.news/download/237867...
CVE-2017-9841-PHPUnit-Remote-Code-Execution-PoC
CVE-2017-9841 — PHPUnit Remote Code Execution RCE PoC ⚠️ DISCLAIMER: This tool is intended solely for educational purposes and authorized security testing. Unauthorized use against systems you do not own or have explicit permission to test is illegal. The author assumes no liability for any misuse...
cve-2024-49113-ldap_nightmare_reproduction
CVE-2024-49113 — LDAP Nightmare Windows LDAP Client Remote Code Execution Heap-Based Buffer Overflow Field| Value ---|--- CVE| CVE-2024-49113 Alias| LDAP Nightmare CVSS 3.1| 9.8 — CRITICAL CWE| CWE-122 — Heap-based Buffer Overflow Discovered| SafeBreach published PoC January 2025 Exploitation|...