openjdk: Improve ciphertext handling (Oracle CPU 2026-10)

A flaw was found in the Security component of Oracle Java SE. An unauthenticated remote attacker with network access could exploit this flaw by supplying crafted input to exposed application programming interfaces APIs or by executing untrusted code within sandboxed environments. A successful...

openjdk: Enhance JPEG loading (Oracle CPU 2026-10)

A flaw was found in OpenJDK's ImageIO component. This vulnerability allows an unauthenticated remote attacker to cause information disclosure by submitting crafted inputs to applications or web services using the ImageIO application programming interface API. Successful exploitation can result in...

openjdk: Enhance GIF loading (Oracle CPU 2026-10)

A flaw was found in OpenJDK's ImageIO component. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted input to applications utilizing ImageIO APIs. Successful exploitation can result in a partial Denial of Service DoS, degrading application...

openjdk: Enhance HTTP Client (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Networking component. An unauthenticated remote attacker with network access can exploit this vulnerability by sending crafted input to exposed networking Application Programming Interfaces APIs. Successful exploitation allows the attacker to perform unauthorized dat...

openjdk: Enhance Image Handling (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Abstract Window Toolkit AWT. A remote attacker with low privileges could exploit this vulnerability by convincing a user to run untrusted code within a sandboxed environment. Successful exploitation allows unauthorized read access to a subset of accessible data,...

EUVD-2026-113415

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution RCE on servers running the Veeam Management Pack for Microsoft System Center Collector service...

EUVD-2023-60727

A vulnerability allowing an unauthenticated attacker to perform remote code execution RCE on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System Center...

EUVD-2026-113417

Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as LocalSystem...

EUVD-2026-113416

A vulnerability allowing an authenticated domain user to perform remote code execution RCE as the LocalSystem account on servers running the Veeam Management Pack for Microsoft System Center Collector service...

CVE-2026-115644

A flaw was found in Apache Kafka Connect. When a dedicated network listener is configured for administrative services, configured security and authentication extensions are not applied to the administrative endpoints. An unauthenticated remote attacker with network access to this administrative...

Exploit for CVE-2026-98432

CVE-2026-98432: Linux kernel IPv4 TCP use-after-free Attack...

SC3010-Computer-Security

SC3010-Computer-Security — CVE-2017-5638 Attack Recreation This repository is part of the SC3010 Computer Security course project. It recreates CVE-2017-5638 , a critical Remote Code Execution vulnerability in Apache Struts 2 versions 2.3.5–2.3.31 and 2.5–2.5.10, famously exploited in the 2017...

CVE-2026-118947

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. The issue occurs when remote resource management is enabled, allowing an authenticated user with specific permissions to...

EUVD-2026-113442

A flaw was found in the UMA resource registration endpoint of the keycloak-services component, which provides the core logic for Keycloak's authorization and identity services. The issue occurs when remote resource management is enabled, allowing an authenticated user with specific permissions to...

CVE-2021-24086

CVE-2021-24086 This is a proof of concept for CVE-2021-24086 "Windows TCP/IP Denial of Service Vulnerability ", a NULL dereference in tcpip.sys patched by Microsoft in February 2021. According to this tweet, the vulnerability has been found by @piazzt. It is triggerable remotely by sending...

CVE-2026-119270

Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-119271

A use after free vulnerability exists in the Skia component of Google Chrome versions prior to 156.0.8078.79 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by serving a crafted HTML page . The vulnerability is classified with a High security severity. While spec...

CVE-2026-119271

Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-113439

Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-119270

Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...