CVE-2026-79121

Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79290

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79121

Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79290

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79054

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79224

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79121

CVE-2026-79121 is a Critical improper input validation vulnerability in the Chromecast component of Google Chrome, fixed in version 152.0.7977.65 (152.0.7977.64 for Linux). An attacker who has already compromised the renderer process can trigger a sandbox escape via a crafted HTML page, achieving...

CVE-2026-79054

CVE-2026-79054 is a use-after-free vulnerability in the Chromecast component of Google Chrome, rated Critical by Chromium and 8.3 HIGH (CVSS v3.1). An attacker who has already compromised the renderer process can leverage a crafted HTML page to escape the sandbox and execute arbitrary code outsid...

CVE-2026-79224

CVE-2026-79224 is a use-after-free vulnerability in the Chromecast component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who has already compromised the renderer process can exploit this flaw via a crafted HTML page to execute arbitrary code outside the sandbo...

CVE-2026-79052

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79282

Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79282

CVE-2026-79282 is a critical use-after-free vulnerability in ANGLE (Almost Native Graphics Layer Engine), the component Chrome uses to translate graphics commands for the OS and GPU. It affects Google Chrome on Android prior to 152.0.7977.65 and allows a remote attacker to execute arbitrary code ...

CVE-2026-79282

Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

FULL-ANALYSIS---CVE-2026-45829-ChromaDB-

CVE-2026-45829 - ChromaDB Pre-Auth RCE CVSS 10.0 ⚠️ AVVERTENZA Questo repository contiene una PoC FUNZIONALE per CVE-2026-45829. SOLO per test autorizzati in ambienti controllati. Descrizione Vulnerabilità critica in ChromaDB versioni 1.0.0 a 1.5.8 che consente a un attaccante non autenticato di...

win32k-callback-detouring

إخلاء مسؤولية تم توفير هذا المستودع لأغراض التعليم والبحث الدفاعي فقط. يستعرض آليات توزيع الاستدعاءات الداخلية في ويندوز ومفاهيم تدفق التحكم المتعلقة بـ KernelCallbackTable في سياق إثبات المفهوم. ليس مخصصًا للاستخدام غير المصرح به غير مصمم للنشر التشغيلي لا يتضمن اعتبارات stealth/opsec يُستخدم فق...

USN-8680-1: FFmpeg vulnerabilities

Adrian Junge discovered that FFmpeg incorrectly handled certain subtitle data. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-70628 Adrian Junge discovered that FFmpeg incorrectly handled certain video files. An attacker could possibly u...

discuz-ml-rce

discuz-ml-rce Sistemas e versões afetados: Discuz!ML V3.2-3.4 Discuz!x V3.2-3.4 Causa da vulnerabilidade: o sistema Discuz!ML não filtra o conteúdo do parâmetro language recebido pelo campo l no cookie, resultando em concatenação de strings e, consequentemente, execução de código PHP. Nos campos ...

CVE-2022-29464

CVE-2022-29464 WSO2 RCE Verwendung : root@kitploit: python3 exploit.py https://host:9443/ ArbitraryShellName.jsp...

CVE-2026-78379

Improper neutralization of input used for LLM prompting in the pythonrepl tool in Amazon Strands Agents Tools before 0.8.5 might allow remote actors to execute arbitrary Python code on the agent's host by bypassing the human consent gate, via a crafted prompt that forwards noninteractivemode as a...

PAN-OS-CVE-2024-3400-Command-Injection-Investigation

Indagine su un tentativo di command injection PAN-OS CVE-2024-3400 Panoramica Questo progetto documenta l'indagine su un tentativo di command injection CVE-2024-3400 rivolto a un servizio PAN-OS GlobalProtect. L'obiettivo era determinare: se si tratti di un attacco reale se l'esecuzione di comand...