SUSE CVE-2026-84334

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

SUSE CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84349

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

SUSE CVE-2026-84351

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-84352

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

SUSE CVE-2026-84354

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-29053

This is a rework of the Repo by rootxran for this same CVE - https://github.com/rootxran/CVE-2026-29053 During testing against specific Ghost CMS environments, the original theme payload triggered a Fatal Handlebars Error. The CMS failed to activate the malicious theme because it referenced a...

CVE-2026-19219

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

Two critical Chrome flaws put users at risk on malicious websites

Update September 4, 2026 Shortly after this article was published, Google released another Chrome update that patches an actively exploited flaw in the V8 JavaScript engine, tracked as CVE-2026-85046. Google rates the vulnerability as high severity and says an exploit already exists in the wild. ...

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process...

CVE-2026-10170-RCE

نظام إدارة الزوار 1.0 - من حقن SQL إلى تنفيذ الأوامر عن بُعد سلسلة هجوم معلومات الثغرة...

ghostlock-vagrant-box

Full Chain Vulnerability Testbed: Nginx RCE → GhostLock LPE Overview This repository provides a Vagrant environment designed to demonstrate a complete two-stage exploitation chain. The testbed automatically provisions an isolated Ubuntu 22.04 LTS virtual machine that is intentionally configured t...

cve-2025-43564-tomcat_put_rce_reproduction

CVE-2025-43564 — Apache Tomcat Partial PUT Request Handling RCE...

CVE-2023-22496-PoC

CVE-2023-22496 — Netdata Agent OS Command Injection PoC Severity : Critical CVSS 9.8 Affected : Netdata Agent Fixed in : v1.37.0 Type : OS Command Injection CWE-78 Overview CVE-2023-22496 is an OS command injection vulnerability in Netdata's health alarm notification system. The registryhostname ...

CVE-2026-42945

RIFT — Remote Injection & Fault Trigger Author: Michael Sanji Winaya Prawiradibrata AI Co-Author: Varanus — sahabatku Heap buffer overflow exploit framework targeting NGINX's ngxhttprewritemodule. Satu tool untuk reconnaissance + exploitation. Zero external dependencies. Isi Repo File| Deskripsi...

CVE-2024-48990

CVE-2024-48990에 대한 PoC CVE-2024-48990는 needrestart 유틸리티에서 발견된 로컬 권한 상승 취약점입니다. 이 취약점은 3.8 이전 버전에 존재합니다. 패키지 설치와 같은 이벤트 중에 root로 실행되는 이 서비스는 모든 실행 중인 프로세스를 안전하지 않은 방식으로 스캔합니다. Python 프로세스를 발견하면 해당 프로세스의 PYTHONPATH 환경 변수를 읽고 신뢰합니다. 권한이 없는 로컬 공격자는 "lure" 프로세스의 PYTHONPATH를 가로챌 수 있습니다. needrestart가 실행...

CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE

CVE-2022-22947-Spring-Cloud-Gateway-SpelRCE CVE-2022-22947 Introduction root@kitploit: Hazard Level: High POC/EXP Status: Public CNVD ID: CNNVD-2022-16402 Affected Versions: Spring Cloud Gateway 3.1.0 Spring Cloud Gateway =3.0.0, =3.0.6 Spring Cloud Gateway 3.0.0 Vulnerability Description Spring...

CVE-2021-23639

نظرة عامة md-to-pdf هي أداة سطر أوامر لتحويل ملفات Markdown إلى PDF. الإصدارات المتأثرة من هذه الحزمة معرضة لثغرة تنفيذ التعليمات البرمجية عن بُعد RCE بسبب استخدام مكتبة gray-matter لتحليل محتوى الواجهة الأمامية front matter دون تعطيل محرك JS. الاستخدام: root@kitploit: python3 cve-2021-23639.py...

CVE-2018-5955

CVE-2018-5955 CVE-2018-5955 GitStack 2.3.10 के लिए एक शोषण Unauthenticated RCE शोषण: GitStack 2.3.10 बिना प्रमाणीकरण के दूरस्थ कोड निष्पादन Unauthenticated Remote Code Execution दिनांक: 18.01.2018 सॉफ़्टवेयर लिंक: https://gitstack.com/ शोषण लेखक: Kacper Szurek मूल शोषण:...