CVE-2018-6537.RCE

CVE-2018-6537 The exploit targets Sync Breeze running on Windows 10 x86, build: 16299 , affecting version 10.4.18 , where an unauthenticated attacker can perform a SEH overflow via a TCP-connection, resulting in remote code execution. This exploit assumes all security mitigations are disabled e.g...

CVE-2017-14980.RCE

CVE-2017-14980 The exploit targets Sync Breeze Enterprise running on Windows 10 x86, build: 16299 , affecting version 10.0.28 , where an unauthenticated attacker can perform a buffer overflow via an HTTP-request body , resulting in arbitrary code execution. This exploit assumes all security...

CVE-2025-55182-Test-Server

CVE-2025-55182-Test-Server Play with react2shell in a safe environment! Quick Start Clone the repo git clone https://github.com/CharlesTheGreat77/CVE-2025-55182-Test-Server cd CVE-2025-55182-Test-Server Run the docker file docker compose up --build -d PoC curl -s -X POST http://localhost:3000/adf...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-audit !CVEhttps://img.shields.io/badge/CVE-2026-...

wp2shell-poc-fulljs

WordPress CVE Logical Flow Demonstration Overview This project allows to reproduce the logical flow related to CVE-2026-63030 and CVE-2026-60137 leading to an sql injection serving as a base to finally trigger a RCE in WordPress. CVE-2026-63030 CVE-2026-60137 The demonstration illustrates how the...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

PHP2SHELL HTTP-only, ASLR-bypassing remote code execution f...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell checker Find out if your PHP site is exposed to p...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell-check CVE-2026-109618 / CVE-2026-109619 !CIht...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

cve-check Shell scripts that check Linux hosts for known vu...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When TIFFWriteScanline fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, TIFFClose flushes...

GHSA-4RR5-89J8-MWWM Pillow: Heap use-after-free when encoding TIFF to an in-memory buffer

Summary Saving an image as TIFF to an in-memory buffer can trigger a heap use-after-free if libtiff rejects a tag at encode time. When TIFFWriteScanline fails, the encoder frees its output buffer but leaves the libtiff handle open. Later, when the encoder object is torn down, TIFFClose flushes...

[SECURITY] [DSA 6576-1] bind9 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6576-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 21, 2026 https://www.debian.org/security/faq -...

php2shell-check

php2shell — Verificação das CVE-2026-109618 e CVE-2026-109619...

CVE-2026-113343

A flaw was found in chromium-browser. A memory corruption vulnerability exists within the browser sandbox, an isolated security environment designed to contain untrusted processes. A remote attacker could exploit this flaw by enticing a user to load a crafted HTML page, leading to arbitrary code...

CVE-2026-113335

A flaw was found in the Extensions component of chromium-browser. This memory corruption issue allows a remote attacker to execute arbitrary code inside the browser's restricted security environment sandbox. To exploit this vulnerability, an attacker must trick a user into visiting a specially...

CVE-2026-113331

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to potentially execute arbitrary code inside the browser sandbox by enticing a user to visit a crafted HTML page. The issue stems from memory corruption within the browser's Controls component...

CVE-2026-113328

A flaw was found in Google Chrome's Privacy component. Due to improper input validation, a remote attacker could convince a user to visit a crafted HTML page to execute arbitrary code outside the browser's security sandbox an isolated execution environment. Successful exploitation could allow the...

CVE-2026-113312

A flaw was found in the Autofill component of Chromium. This memory corruption vulnerability allows a remote attacker to execute arbitrary code within the browser's isolated security sandbox. An attacker could exploit this flaw by enticing a user to visit a specially crafted HTML page...

CVE-2026-113294

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code inside the browser's isolated sandbox environment by convincing a user to open a crafted HTML page. The vulnerability stems from improper input validation within the Loader component...