CVE-2019-9766

CVE-2019-9766 Используя уязвимость переполнения буфера в Free MP3 CD Ripper 2.6, создаётся специальный MP3-файл; когда жертва воспроизводит его в плеере, аудиофайл-приманка использует переполнение буфера для выполнения произвольного кода. Воспроизведение Атакующая машина: kali201903 192.168.198.1...

[SECURITY] [DSA 6540-1] radsecproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6540-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 02, 2026 https://www.debian.org/security/faq -...

frida

frida This repository contains various Frida scripts for Android application penetration testing. I created this project to demonstrate the capabilities of the Frida dynamic-analysis framework. You can read my "Introduction to Frida" blog post on Medium, where I'm explaining how to use Frida with...

vulnerable-PDF

vulnerable-PDF = Salaries.pdf - 개발 모드: 08.10.2022 참고: 이것은 테스트 전용이며 Microsoft의 통합 프로그램인 계산기만 열 수 있습니다. = 또는 PDF 파일을 사용하여 금지된 디렉터리에 calc.exe를 다운로드할 수 있습니다 :D 경고! 테스트 및 교육 전용입니다 = vulnerable-PDF = Book.pdf 참고: System23 디렉터리를 둘러보고 그 안에 무엇이 있는지 확인할 수 있습니다 = 경고! 테스트 및 교육 전용입니다 = vulnerable-PDF =...

CVE-2025-59528-PoC

CVE-2025-59528 PoC Концепция доказательства Proof of Concept для исследования CVE-2025-59528 в изолированной лабораторной среде. !WARNING ПРЕДУПРЕЖДЕНИЕ Данный проект предназначен строго для образовательных целей, исследований в области безопасности и тестирования систем, которыми вы владеете или...

CVE-2026-103625

A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution within the browser's restricted sandbox environment by enticing a user to visit a specially crafted HTML page. This issue is caused by a type confusion vulnerability in the V8 JavaScript engine...

CVE-2026-104843

A flaw was found in uv. An attacker could achieve arbitrary code execution on a Windows system by tricking a user into installing a specially crafted Python wheel package. During archive extraction, files can be written outside the intended target directory, allowing an attacker to place maliciou...

CVE-2026-103624

A flaw was found in chromium-browser. A remote attacker who has already compromised the renderer process could exploit a use-after-free vulnerability accessing memory after it has been freed in the Contextual Tasks component by convincing a user to visit a crafted HTML page. Successful exploitati...

CVE-2019-7609

CVE-2019-7609 Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer https://nvd.nist.gov/vuln/detail/CVE-2019-7609 CVE-2019-7609 Эта уязвимость — загрязнение прототипов Prototype Pollution, обнаруженная в Kibana. Её эксплуатация может привести...

CVE-2026-30754

A flaw was found in FFmpeg. This memory corruption vulnerability occurs during the Real-time Transport Protocol RTP encoding of H.264/HEVC streams. A remote attacker could exploit this by providing a specially crafted input file, leading to a negative size parameter being passed to a memory copy...

CVE-2023-30547

CVE-2023-30547 취약점 설명 vm2는 Node의 허용된화이트리스트 내장 모듈로 신뢰할 수 없는 코드를 실행할 수 있는 샌드박스입니다. vm2 3.9.16 이하 버전의 예외 정화exception sanitization 과정에 취약점이 존재하며, 공격자는 handleException 내부에서 정화되지 않은 호스트 예외를 발생시켜 샌드박스를 탈출하고 호스트 컨텍스트에서 임의 코드를 실행할 수 있습니다. CVE-2023-30547.py 이 도구는 취약점을 탐색하는 데 사용할 수 있는 간단한 파이썬 스크립트입니다. 다음 4가...

VertXploit

VertXploit Эксплуатация систем контроля доступа HID VertX и EDGE Краткое описание VertXploit — это инструмент, который можно использовать для эксплуатации систем контроля доступа HID VertX и EDGE. В службе discoveryd существует уязвимость, которая не выполняет очистку пользовательских данных пере...

CVE-2026-103626

Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-103628

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2025-25014

POC для CVE-2025-25014 Уязвимость Prototype pollution в Kibana приводит к выполнению произвольного кода через специально сформированные HTTP-запросы к конечным точкам машинного обучения и отчётности. В настоящее время этот POC только обнаруживает уязвимые экземпляры. Использование python...

EUVD-2026-91714

Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-103623

Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-103626

Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-103626

Google Chrome on Windows versions prior to 154.0.8037.97 is vulnerable to a High severity flaw in the FileSystem component. Due to an incorrect authorization issue, a remote attacker can leverage social engineering to trick a user into interacting with a crafted HTML page . This interaction could...

CVE-2010-1240

CVE-2010-1240 - PDF에 백도어 삽입 ⚠️ 교육 및 승인된 보안 연구 목적으로만 사용하세요 Description Windows 및 Mac OS X에서 Adobe Reader 및 Acrobat 9.x9.3.3 미만 및 8.x8.2.3 미만는 파일 실행 경고 대화상자의 한 텍스트 필드 내용을 제한하지 않습니다. 이로 인해 원격 공격자가 PDF 문서에 지정된 임의의 로컬 프로그램을 실행하도록 사용자를 속이기 쉬워집니다. 이는 열기 버튼을 클릭하면 사용자가 암호화된 메시지를 읽을 수 있다고 주장하는 텍스트 필드를 통해...