CVE-2026-113188

A flaw was found in the Graphics Processing Unit GPU component of chromium-browser. This flaw allows a remote attacker to execute arbitrary code inside the browser's sandbox environment. To exploit this vulnerability, the attacker must convince a user to view a specially crafted HTML page,...

CVE-2026-113194

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the browser's sandbox, an isolated execution environment. An attacker can exploit this issue by convincing a user to open a specially crafted HTML page, triggering memory corruption ...

OpenWire-CVE-2023-46604-Investigation

OpenWire-CVE-2023-46604-Investigation OpenWire Lab During my shift as a Tier 2 Security Operations Center SOC Analyst, I received an escalation from a Tier 1 analyst regarding a publicly accessible server that had been observed communicating with multiple suspicious external IP addresses. In...

CVE-2026-113204

A flaw was found in the Trusted Web Activities component of the Chromium browser. A remote attacker could exploit this vulnerability by convincing a user to load a specially crafted HTML page, triggering a use-after-free condition where the application references memory that has already been...

thm-ice-icecast-rce-privesc

TryHackMe — Ice: Icecast 2.0.1 RCE & Windows Privilege Escalation Platform: TryHackMe Target OS: Windows 7 / Windows Server 2008 R2 Difficulty: Easy Category: Buffer Overflow RCE, Local Privilege Escalation Summary This report documents the full compromise of the Ice machine on TryHackMe, from...

CVE-2026-113185

A flaw was found in the Extensions component of chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox. An attacker could exploit this memory corruption issue by convincing a user to visit a specially crafted HTML page...

CVE-2026-113183

A flaw was found in the Federated Credential Management FedCM component of chromium-browser. This memory corruption vulnerability allows a remote attacker to potentially execute arbitrary code within the browser sandbox by convincing a user to visit a crafted HTML page. Successful exploitation...

CVE-2026-113182

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from memory corruption within the Passwords component...

CVE-2026-113180

A flaw was found in the ContentCapture component of Google Chrome on Android. This memory corruption vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a victim to open a specially crafted HTML page...

CVE-2026-113173

A flaw was found in Google Chrome. This vulnerability allows a remote attacker to execute arbitrary code within the sandbox an isolated security environment by convincing a user to visit a crafted HTML page. The issue is caused by improper input validation in the user interface UI component...

CVE-2026-113172

A flaw was found in chromium-browser. A memory corruption vulnerability in the ServiceWorker component allows a remote attacker to execute arbitrary code within the browser sandbox by tricking a user into visiting a crafted HTML page. Successful exploitation compromises the browser's isolated...

CVE-2026-113118

A flaw was found in chromium-browser. A memory corruption vulnerability in the Extensions component allows a remote attacker to execute arbitrary code within the browser's sandbox an isolated security environment. An attacker could exploit this vulnerability by convincing a user to view a special...

session_reaper_lab

CVE-2025-54236 - SessionReaper Lab Docker environment for practical demonstration of CVE-2025-54236 SessionReaper: PHP Object Deserialization leading to RCE in Magento Open Source 2.4.7. Exclusive use in controlled environment. Do not run against systems without explicit authorization. About the...

CVE-2026-0073

0-Click RCE on Android Critical vulnerability CVE-2026-0073 in Android ADB, an authentication bypass flaw in the TLS certificate verification of the adbd daemon, specifically in the adbdtlsverifycert function. The TLS certificate verification makes Wireless Debugging accept an attacker as if they...

cve-2023-51385

Verify CVE-2023-51385 First, add the following content to /.ssh/config host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p There is a command injection in the .gitmodules file statement url = ssh://echo helloworld cve.txtfoo.example.com/bar After configuration, execute t...

EUVD-2026-107560

There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs...

CVE-2026-82987 CVE-2026-82987

There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote, unauthenticated attacker to capture and exfiltrate the current screen content via GET requests to an unauthenticated /snapshot or /screen endpoint returning JPEGs...

CVE-2026-82987

The ViewSonic vCast media streaming service on ViewBoard smartboards (Android-based) is vulnerable to arbitrary input injection via unauthenticated HTTP requests to exposed service endpoints (CVE-2026-82987 ). This vulnerability can be chained with other flaws in the vCast suite to achieve full d...

CVE-2026-114379

A file inclusion vulnerability exists in EKKOLearnAI ekko-studio versions up to 1.0.6 . The flaw is located in the Media Generation API component, specifically within the saveGeneratedImages function of the file packages/server/src/modules/studio/controllers/media.ts. An attacker can manipulate t...

CVE-2026-114379 EKKOLearnAI ekko-studio Media Generation API media.ts saveGeneratedImages file inclusion

A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. This vulnerability affects the function saveGeneratedImages of the file packages/server/src/modules/studio/controllers/media.ts of the component Media Generation API. This manipulation of the argument outputpath causes file inclusion...