CVE-2026-79012

Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79121

Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79290

A use after free vulnerability in the Aura component of Google Chrome prior to version 152.0.7977.65 allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a crafted HTML page. The bug was internally reported by Google on 2026-05-25 (Chromium bug 5164...

CVE-2026-79290

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-79052

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-65620

Ekushey Project Manager CRM stores the administrator-configured system name and writes it to the login page without output encoding. The value is emitted in three places on that page: the content attribute of the description meta element, the title element, and the text of an h4 element in the pa...

CVE-2026-26211

Ekushey Project Manager CRM 5.0 is affected by a stored XSS vulnerability in the administrator-configured system name field. The value is written to the login page without output encoding, and its occurrence in an h4 element is parsed as markup, causing any injected HTML event handlers to execute...

dirtypipe

reF: https://access.redhat.com/security/vulnerabilities/RHSB-2022-002 निदान आपकी प्रणाली वर्तमान में इस दोष से प्रभावित है या नहीं, यह निर्धारित करने के लिए एक भेद्यता पहचान स्क्रिप्ट विकसित की गई है। स्क्रिप्ट की प्रामाणिकता सत्यापित करने के लिए, आप अलग OpenPGP हस्ताक्षर भी डाउनलोड कर सकते हैं।...

Byepervisor

Byepervisor Riepilogo Exploit dell'hypervisor per PS5 per firmware = 2.xx. Nel repository sono contenute due vulnerabilità e relative catene di exploit, indipendenti tra loro; è possibile usarne una qualsiasi. Un exploit è fornito principalmente per preservazione /oldjumptableexploit, serve solo ...

Exploit_CVE-2020-0688

CVE-2020-0688 Ausnutzungsskript für CVE-2020-0688 "Microsoft Exchange Standard-MachineKeySection-Deserialisierungsschwachstelle" Verwendung: root@kitploit: powershell -exec bypass -file .\CVE-2020-0688.ps1 -xaml -uri Beispiel: Dies ist ein Beispiel für die Schwachstellenvalidierung durch Setzen...

BIT-KEYCLOAK-2026-9800 Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparison

A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access UMA permission checks. By including the configured access-denied page path within a request URL, either as a path...

BIT-KEYCLOAK-2024-7260 Keycloak-core: open redirect on account page

An open redirect vulnerability was found in Keycloak. A specially crafted URL can be constructed where the referrer and referreruri parameters are made to trick a user to visit a malicious webpage. A trusted URL can trick users and automation into believing that the URL is safe, when, in fact, it...

SmartAsset-UE-CVE-2020-26526

SmartAsset-UE-CVE-2020-26526 Es ist möglich, auf der Anmeldeseite gültige Benutzernamen zu enumerieren. CVE-2020-26526 Ein Problem wurde in Damstra Smart Asset 2020.7 entdeckt. Es ist möglich, auf der Anmeldeseite gültige Benutzernamen zu enumerieren. Die Anwendung sendet eine andere Serverantwor...

Dirty-Frag-CVE-2026-43284

Dirty-Frag-CVE-2026-43284 Dirty Frag CVE‑2026‑43284 & CVE‑2026‑43500 — Laboratorio di Riproduzione e Rilevamento dell'Exploit Questo repository documenta la riproduzione end‑to‑end, l'ingegneria del rilevamento e la risposta agli incidenti per la catena di escalation dei privilegi locali LPE Dirt...

rootpacket-cve-2026-31431

rootpacket CVE-2026-31431 Un toolkit di cryptojacking Linux da Docker all'host catturato da attacchi live su Kinryū Labs honeypot. Entra attraverso un'API del motore Docker esposta, evade dal container per ottenere root sull'host con CVE-2026-31431 , installa un rootkit del kernel ed esegue un...

CVE-2019-19658

CVE-2019-19658 Chevereto XSS persistente nella pagina del profilo - 1.0.0 - 1.1.4 Free, Un utente registrato inietta uno script nel campo del nome, in questo caso per reindirizzare l'utente a Google Qualcuno entra nel profilo di /test e viene quindi reindirizzato...

Drupal_REST-RCE_Unauthenticated

CVE-2019-6340 — Drupal RESTful Web Services RCE Implementazione Python dell'exploit di esecuzione di codice in remoto per CVE-2019-6340, basata sull'analisi del modulo Metasploit e sul lavoro precedente di leonjza. Differenza chiave rispetto a EDB-46459: utilizza POST invece di GET, bypassando la...

CVE-2026-56092

CVE-2026-56092 is a Broken Access Control vulnerability in the Apache Solr for TYPO3 – Enterprise Search extension (solr). During indexer sub-requests, the extension forces empty frontend-group and subpage-inheritance restrictions onto page records. This forged state is then persisted into the sh...

CVE-2025-14172-Nuclei-Template

📄 Template Nuclei per CVE-2025-14172 🚀 Panoramica Questo repository contiene un template Nuclei specificamente progettato per rilevare una vulnerabilità di autorizzazione mancante CVE-2025-14172 nel plugin WordPress WP Page Permalink Extension. Questo problema consente ad attaccanti autenticati d...

CVE-2026-43284-DirtyFrag-PoC

CVE-2026-43284 — 4-byte XFRM/ESP Proof-of-Concept zur lokalen Privilegienausweitung mittels XFRM/ESP-Seitencache-Korruption 4-Byte-Schreibprimitive · 48 Iterationen · 192-Byte-ELF-Überschreibung · unprivilegierter Benutzer + netns Proof of Concept Links: Kernel-Preflight, setuid-Scan und...