Linux Distros Unpatched Vulnerability : CVE-2026-52022

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling components CVE-2026-52022...

KLA91258 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can be...

PT-2026-85234

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A race condition in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to open a specially crafted HTML page. A race condition...

PT-2026-85231

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A use after free issue in DevTools allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to open a crafted HTML page. Use after free is a memory...

PT-2026-85236

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 152.0.7977.82 Description Improper input validation in the Transactions Platform allows a remote attacker to potentially execute arbitrary code outside the sandbox when a user visits a crafted HTML page...

Next.js Framework 13.4 < 15.5.24 / 16.x < 16.3.3 RCE (Windows)

The Next.js Framework on the remote host is affected by a remote code execution vulnerability: - A vulnerability in applications using both the Pages Router and App Router without Cache Components can lead to unauthenticated remote code execution when the Next.js server uses a Windows filesystem...

PT-2026-85028

Name of the Vulnerable Software and Affected Versions Tenda HG10 300001138 affected versions not specified Description A buffer overflow can be triggered remotely within the Boa Web Server component. The issue exists in the formLogin function located in the /boaform/formLogin file when the Userna...

Linux Distros Unpatched Vulnerability : CVE-2026-84347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

KLA91260 PE vulnerabilities in Microsoft Office

Privilege escalation vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Fabric can be exploited remotely to gain privileges. 2. A...

PT-2026-85232

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description Incomplete cleanup within the Network component allows a remote attacker to bypass system access restrictions by sending specially crafted network traffic. Recommendations Update Google...

Dell iDRAC9 7.0.x < 7.00.00.182 / 7.20.x < 7.20.30.50 Improper Access Control (DSA-2026-374)

The version of Dell Integrated Remote Access Controller 9 iDRAC9 running on the remote host is 7.0.x prior to 7.00.00.182, or 7.20.x prior to 7.20.30.50. It is, therefore, affected by an improper access control vulnerability. A remote attacker with low privileges could potentially exploit this...

Telerik UI for ASP.NET AJAX < 2026.3.812 Multiple Vulnerabilities

The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is prior to 2026.3.812. It is, therefore, affected by multiple vulnerabilities: - In Progress Telerik UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may...

VulnCheck KEV: CVE-2026-85046

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2025-49132-PoC

CVE-2025-49132-PoC Proof-of-Concept for CVE-2025-49132 for Remote Code Execution in Pterodactyl Panel -m check Do something funny python3 poc.py -u -m exploit -p -t Technical Details Analyzing the git diff of LocaleController.php between v1.11.10 and v1.11.11 link, we can see that the controller...

CVE-2025-5688-FreeRTOS-Plus-TCP-Out-of-Bounds-Write

CVE-2025-5688 – FreeRTOS-Plus-TCP Out-of-Bounds Write Exploit Remote memory corruption / DoS / potential RCE trigger in FreeRTOS-Plus-TCP when processing overly long DNS names in LLMNR or mDNS queries Buffer Allocation Scheme 1. Exploit Author: Mohammed Idrees Banyamer Country: Jordan Instagram:...

EUVD-2026-58518

OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs...

GHSA-QH9R-J7RP-4X2M OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs

Summary The OpenChoreo control-plane cluster-gateway served its caller-facing management APIs on the same network listener that accepts data-plane agent connections. In the multi-cluster topology that listener is published outside the cluster, and the management APIs did not authenticate the...

EUVD-2026-63649

Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends...

CVE-2023-42115

CVE-2023-42115 Exim AUTH Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Exim. Authentication is not required to exploit this vulnerability. Build root@kitploit: git clone...

EternalBlue-Exploit-Demonstration-MS17-010

EternalBlue Exploit Demonstration MS17-010 Cybersecurity lab demonstrating exploitation of CVE-2017-0144 EternalBlue using Metasploit against a vulnerable Windows 7 system, achieving SYSTEM-level access via Meterpreter. This project also simulates a WannaCry-style ransomware attack SAFE DEMO and...