1201632 matches found
chromium-browser: angle: Use after free in ANGLE
Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Low...
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page
A flaw was found in ANGLE, a component of Google Chrome on Android. This 'use after free' vulnerability allows a remote attacker to execute arbitrary code outside the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page. Successful exploitati...
chromium-browser: angle: ANGLE Out-of-Bounds Write Vulnerability
A flaw was found in chromium-browser. An out-of-bounds write vulnerability exists within the ANGLE graphics component, allowing a remote attacker to trigger out-of-bounds memory access by providing a specially crafted HTML page. This allows an attacker to potentially manipulate memory contents. T...
chromium-browser: angle: Chromium: Remote code execution via out-of-bounds write in ANGLE
A flaw was found in ANGLE, a component of Chromium. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the...
chromium-browser: ANGLE: angle: ANGLE: Arbitrary Code Execution via Crafted HTML Page
A flaw was found in ANGLE, a component used in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. The exploitation occurs when a user visits a specially crafted HTML page, leading to a severe...
chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via improper input validation
A flaw was found in ANGLE, a component of Google Chrome. Improper input validation could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a complete compromise of the affected...
chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via crafted HTML page
A flaw was found in the ANGLE component of Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...
chromium-browser: angle: Heap buffer overflow in ANGLE
A Heap based buffer overflow issue has been ientified in ANGLE in Google Chrome that allowed a remote attacker to potentially exploit heap corruption via malicious network traffic...
chromium-browser: angle: Out of bounds memory access in ANGLE
Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...
HFS_EXPLOIT_PROJECT
HFSEXPLOITPROJECT Metasploit RCE on HFS 2.3 - CVE-2014-62 🔖 Title of the Project Remote Code Execution via HTTP File Server HFS 2.3 ⚙ Tools Used • Kali Linux • Nmap • Metasploit • Target: HFS 2.3 on Windows 7 🔐 Vulnerability Details • Name: CVE-2014-6287 • Type: Remote Code Execution • Cause:...
CVE-2026-86398
Dell PowerProtect Data Domain is affected by a Path Traversal vulnerability (CWE-22) in several release lines, including Feature Release versions 7.7.1.0 through 8.8 and LTS2024, LTS2025, and LTS2026 versions. A low privileged attacker with remote access could exploit this flaw to gain filesystem...
CVE-2026-86398
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Limitation of a Pathname to a Restricted...
CVE-2019-7609-KibanaRCE
CVE-2019-7609-KibanaRCE Minor changes were made to the CVE to make it compatible with Python 3. cve-modific.py Here are the modifications: In the getkibanaversion function, the line match = re.findallpattern, r.content was updated to match = re.findallpattern, r.text. This change was made to use...
Rocket-Chat-3.12.1-PoC-CVE-2021-22911-
Rocket-Chat-3.12.1-PoC-CVE-2021-22911- 1. Go login page 2. Register new account, set password as P@$$w0rd!1234 3. Run script -u = Low priv user email No 2fa -a = Administrator email -t = URL Eg: http://rocketchat.local python3 rocketchat.py -u [email protected] -a [email protected] -t...
Additive-Vulnerability-Analysis-CVE-2021-41773
Additive-Vulnerability-Analysis-CVE-2021-41773 Apache: a Mainstream Web Service Turned a Vector of Attack for Remote Code Execution...
Laravel-CVE-2018-15133
Laravel-CVE-2018-15133 This Python script will allow you to create lists of sites and exploit them quickly. Prerequisites: python curl Usage: $ python cve.py Execute the script $ "Which site do you want to attack =" http:victime.com/ Add the site to the list $ chmod +x nikmok.txt gives 777...
CVE-2019-12409
CVE-2019-12409: RCE Vulnerability Due to Bad Defalut Config in Apache Solr The 8.1.1 and 8.2.0 releases of Apache Solr contains insecure setting in the default solr.in.sh configuration file shipping with Solr. The setting that result in this vulnerability are: In "solr.in.sh":...
CVE-2026-86399
Dell PowerProtect Data Domain is affected by an OS Command Injection vulnerability (CWE-78) across several releases, including Feature Release versions 7.7.1.0 through 8.8 and specific LTS2024, LTS2025, and LTS2026 versions. The root cause is the improper neutralization of special elements used i...
EUVD-2026-111839
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an...
CVE-2026-86399
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Neutralization of Special Elements used in an...