330119 matches found
CVE-2026-118357
Use after free in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-118339
A Use after free vulnerability exists in the Animation component of Google Chrome versions prior to 156.0.8078.73 . This flaw allows a remote attacker to achieve arbitrary code execution inside the sandbox by navigating to a crafted HTML page. No specific exploit details or proof-of-concept links...
CVE-2026-118350
Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free flaw in Turbolev . This security issue, categorized with High severity, allows a remote attacker to execute arbitrary code inside the sandbox by interacting with a crafted HTML page. No specific exploit links or reme...
CVE-2026-118357
Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free flaw in the FileSystem component. This vulnerability allows a remote attacker to potentially execute arbitrary code inside the sandbox by interacting with a crafted HTML page. The security severity is rated as High b...
CVE-2026-118344
Use after free in Layout in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-118348
Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-118348
A critical vulnerability in Google Chrome (versions prior to 156.0.8078.73 ) exists due to improper input validation within the Skia component. This flaw allows a remote attacker to potentially execute arbitrary code inside the sandbox by interacting with a crafted HTML page. No specific exploit ...
CVE-2026-118331
Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Critical security flaw caused by improper input validation in the FileAPI component. A remote attacker could exploit this by leveraging a crafted HTML page to potentially execute arbitrary code within the sandbox. No specific explo...
CVE-2026-118331
Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-118344
Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free vulnerability in the Layout component. This flaw allows a remote attacker to execute arbitrary code inside the sandbox by leveraging a crafted HTML page. The issue is classified as Critical severity. Remediation is a...
CVE-2026-118306
Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
CVE-2026-118306
Google Chrome versions prior to 156.0.8078.73 are vulnerable to a memory corruption flaw within the FileSystem component. This vulnerability allows a remote attacker to potentially achieve arbitrary code execution outside the sandbox by navigating to a crafted HTML page. The security severity is ...
CVE-2024-12877-Exploit
GO-TO CVE – CVE-2024-12877-Exploit Week 66 | Author: Ali Soltani soltanali0 Welcome to Week 66 of the GO-TO CVE series , where we dissect vulnerabilities, analyze root causes, and demonstrate practical exploitation techniques in a safe, educational context. 🚨 Overview CVE-2024-12877 is a PHP Obje...
CVE-2022-24112
CVE-2022-24112 Apache APISIX batch-requests RCECVE-2022-24112 Place the target in url.txt python3 ApacheAPISIXRCECVE-2022-24112.py Cmd:...
CVE-2021-40444-POC
CVE-2021-40444-POC An attempt to reproduce Microsoft MSHTML Remote Code Execution RCE Vulnerability using Metasploit Framework. works best if not run in FlareVM PREPARATION Git Clone the repository from https://github.com/lockedbyte/CVE-2021-40444 Prepare the .dll template to be used later with...
cve-2025-43564-tomcat_put_rce_reproduction
CVE-2025-43564 — Apache Tomcat Partial PUT Request Handling RCE Field| Value ---|--- CVE ID| CVE-2025-43564 CVSS Score| 9.8 CRITICAL Vector| AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-494 — Download of Code Without Integrity Check Exploitation| Confirmed in the wild within one week of disclosur...
CVE-2022-36446-Webmin-Software-Package-Updates-RCE
A Python script to exploit CVE-2022-36446 Software Package Updates RCE Authenticated on Webmin 1.997. Features Supports HTTP and HTTPS even with self-signed certificates with --insecure. Single command execution with --command option. Interactive console with --interactive option. Usage $...
CVE-2024-21413
CVE-2024-21413 - Expect Script POC Microsoft Outlook Leak credentials & Remote Code Execution Vulnerability when chained with CVE-2023-21716 through the preview panel CVSS:3.1 9.8 / 8.5 Outlook should warm you about the risk on opening an external link = but this is not the case! usage:...
CVE-2024-27348
CVE-2024-27348 For Ethical Usages only, Any harmful or malicious activities are not allowed. And it's your own responsability You Can Read the analysis for the vulnerability from here: https://blog.securelayer7.net/remote-code-execution-in-apache-hugegraph/ Apache HugeGraph Server RCE Scanner...
CVE-2023-33246_RocketMQ_RCE_EXPLOIT
CVE-2023-33246 RocketMQ Remote Code Execution Exploit CVE-2023-33246 RocketMQ Remote Code Execution Exploit Overview RocketMQ is a distributed messaging and streaming platform. RocketMQ versions 5.1.0 and below are vulnerable to Arbitrary Code Injection. Broker component of RocketMQ is leaked on...