CVE-2026-39987_exploit

🔥 CVE-2026-39987 | Marimo Pre-Auth RCE Exploit Exploitation Framework | Full Remote Code Execution RCE | WebSocket Auth Bypass 🧠 To know the commands more Open the file website.html 🎯 Overview This exploit targets Marimo applications running WebSocket on port 2718 default. The vulnerability allow...

kernel: ALSA: seq: close a re-opened queue timer in the destructor

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...

kernel: xfs: bounds-check buffer log item's dirty bitmap

A flaw was found in the Linux kernel's XFS filesystem. A local attacker, by mounting a specially crafted XFS image, could trigger an out-of-bounds write during log recovery. This vulnerability allows for kernel heap corruption, which could lead to a denial of service or potentially arbitrary code...

RpcProxyInvoke

RpcProxyInvoke Overview To create a general way to execute local and remote code, we designed a relatively obscure method of code execution, which we internally refer to as RpcCraft Self and RpcExec Remote Process. This technique leverages a methodology well-known among exploit developers, abusin...

CVE-2026-73570

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview Field| Value ---|--- CVE| CVE-2026-73570 CVSS 3.1| 8.9 HIGH — AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L CWE|...

CiscoRV320Dump

CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Exploits For Dumping Cisco RV320 Configurations and getting RCE Implementations of the CVE-2019-1652 and CVE-2019-1653 exploits disclosed by Red Team Pentesting GmbH. I only tested these on an RV320, but according to the Cisco advisory, the RV325 is also...

CVE-2026-113162

A flaw was found in chromium-browser. Due to improper input validation in the Actor component, a remote attacker can potentially execute arbitrary code within the browser's restricted sandbox environment by convincing a user to view a specially crafted HTML page...

CVE-2026-113164

A flaw was found in the Voice component of Google Chrome. A remote attacker can execute arbitrary code inside the browser's sandbox an isolated security environment by enticing a user to visit a specially crafted HTML page. This vulnerability is caused by a memory corruption flaw within the...

CVE-2026-113153

A flaw was found in chromium-browser. A memory corruption vulnerability exists in the SiteIsolation component. A remote attacker can exploit this flaw by convincing a user to visit a specially crafted HTML page, potentially leading to arbitrary code execution within the browser's sandbox...

CVE-2026-113152

A flaw was found in chromium-browser. A remote attacker could trigger a memory corruption vulnerability in the SignIn component by enticing a user to visit a crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code inside the browser sandbox...

CVE-2026-113138

A flaw was found in chromium-browser. This vulnerability is caused by a memory corruption issue within the WebAppInstalls component. A remote attacker could exploit this flaw by enticing a user to visit a specially crafted HTML page, potentially allowing the execution of arbitrary code outside th...

CVE-2026-113150

A flaw was found in the Bindings component of Chromium. A remote attacker could exploit this vulnerability by enticing a user into visiting a specially crafted HTML page. Successful exploitation leads to memory corruption, which may allow the attacker to execute arbitrary code within the browser'...

CVE-2026-113154

A flaw was found in Chromium. This vulnerability allows a remote attacker to potentially execute arbitrary code within the browser sandbox via memory corruption in the Canvas component. To exploit this flaw, an attacker must entice a user to visit a specially crafted HTML page...

CVE-2026-113147

A flaw was found in the WebShare component of Chromium. Improper input validation allows a remote attacker to execute arbitrary code within the restricted browser sandbox by convincing a user to visit a crafted HTML page...

CVE-2026-113149

A flaw was found in the FullScreen component of Chromium. A remote attacker could exploit this memory corruption vulnerability by enticing a user to view a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the confines of the browser sandbox...

CVE-2026-113166

A flaw was found in chromium-browser. A remote attacker could exploit this memory corruption vulnerability in the browsing history feature by convincing a user to view a specially crafted web page. Successful exploitation allows the attacker to execute arbitrary code within the browser's restrict...

CVE-2026-113148

A flaw was found in chromium-browser's Web user interface WebUI component. A remote attacker could potentially achieve arbitrary code execution within the browser's sandbox environment by tricking a user into visiting a specially crafted HTML page. This vulnerability is caused by a memory...

CVE-2026-113132

A flaw was found in the DevTools component of Chromium. A remote attacker could exploit this memory corruption vulnerability by enticing a user to load a specially crafted HTML page. Successful exploitation may allow an attacker to execute arbitrary code inside the browser sandbox...

CVE-2026-113131

A flaw was found in the Bluetooth component of Chromium. This vulnerability allows a remote attacker to achieve arbitrary code execution inside the browser's sandbox an isolated execution environment by tricking a user into visiting a specially crafted HTML page. The issue stems from memory...

CVE-2026-113133

A flaw was found in the PlatformIntegration component of chromium-browser. A remote attacker could exploit this vulnerability by convincing a user to load a specially crafted HTML page, triggering memory corruption. Successful exploitation allows the attacker to achieve arbitrary code execution...