Firefox-CVE-2024-9680

Firefox CVE-2024-9680 CVE-2024-9680 Descrição Um atacante conseguiu alcançar a execução de código no processo de conteúdo ao explorar um use-after-free uso após liberação em timelines de animação Animation timelines. Recebemos relatos de que essa vulnerabilidade está sendo explorada na natureza...

cve-2024-0519-rca-research

CVE-2024-0519 — RCA अनुसंधान CVE-2024-0519 के लिए मूल कारण विश्लेषण कलाकृतियाँ V8 आउट-ऑफ-बाउंड मेमोरी एक्सेस, Chrome 120, जंगली में शोषित। फिक्स : e0f2a195d87c9a06685121e0e783efd92d030df3 — Toon Verwaest, 2024-01-12 अध्ययन किया गया V8 संस्करण : 12.0.267.16 fbc4963bbff, ARM64 macOS फ़ाइलें...

CVE-2026-0257

CVE-2026-0257 Vulnerabilidade de bypass de autenticação do GlobalProtect PAN-OS ⚡ Uso Simples Use este projeto apenas em ambientes seguros e autorizados, como: Máquinas virtuais locais Containers Docker Configurações de laboratório isoladas Ambientes de teste de penetração autorizados Exemplo de...

CVE-2025-66478

CVE-2025-66478 - Análise de Logs de Ataques Reais de RCE em Server Actions do Next.js Resumo Este projeto reúne logs de ataque reais registrados por uma aplicação Next.js 15.1.2 exposta na internet executando em um contêiner Docker. Estes logs demonstram a varredura e exploração em larga escala d...

cve-2023-5217-poc

CVE-2023-5217: PoC dell'heap overflow nella codifica VP8 di libvpx CVE-2023-5217 è una vulnerabilità di libvpx sfruttata in the wild che è stata trovata da Clément Lecigne del Threat Analysis Group di Google mentre prendeva di mira Chrome. Questo repository mostra come innescare CVE-2023-5217 nel...

CVE-2021-40444

〖EXP〗Ladon CVE-2021-40444 Nachstellung der Office-Sicherheitslücke Überblick über die Sicherheitslücke Am 8. September Pekinger Zeit entdeckte das CERT von NSFOCUS, dass Microsoft ein Sicherheitsbulletin veröffentlichte, das die Sicherheitslücke zur Remote-Codeausführung in Microsoft MSHTML...

CVE-2023-38831-RaRCE

RaRCE, generatore di exploit per CVE-2023-38831 Questo è un generatore di exploit versatile, facile da installare e da usare, per CVE-2023-38831, una vulnerabilità che colpisce le versioni di WinRAR precedenti alla 6.23. RARLabs WinRAR precedente alla versione 6.23 consente agli attaccanti di...

CVE-2022-26134-LAB

CVE-2022-26134-LAB Confluence Server e Confluence Data Center includono una significativa vulnerabilità di esecuzione remota di codice non autenticata identificata come CVE-2022-26134, secondo un advisory di sicurezza rilasciato da Atlassian il 2 giugno 2022. La vulnerabilità non era stata corret...

CVE-2021-30632

Von: https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE-2021-30632 Die Analyse dieses Bugs findest du hier. Es handelt sich um einen Chrome-Bug, der von einem anonymen Forscher gemeldet wurde und von dem angenommen wird, dass er in freier Wildbahn ausgenutzt wurde. Der...

CVE-2022-47986

CVE-2022-47986 Warum Diese Schwachstelle wird aktiv ausgenutzt. IceFire nutzt diese Schwachstelle, um Ransomware auf Zielsystemen zu deployen. Ich möchte SOC/Blue Teams helfen, betroffene Systeme zu identifizieren, und Pentestern/Red Teams, diese auszunutzen und zu melden. Beschreibung Ich stelle...

CVE-2026-2441-PoC

CVE-2026-2441-PoC PoC per CVE-2026-2441 PoC per Use-After-Free in CSS di Chrome Blink CSSFontFeatureValuesMap PoC che attiva la UAF nell'elaborazione CSS → RCE nel renderer all'interno della sandbox su Chrome =144.0.x tutte le piattaforme. Trigger: @font-feature-values + container-query + ricalco...

CVE-2023-24059

CVE-2023-24059 Grand Theft Auto V para PC permite que atacantes obtenham execução remota parcial de código ou modifiquem arquivos em um PC, conforme explorado ativamente em janeiro de 2023. autenticação| complexidade| vetor ---|---|--- não disponível| não disponível| não disponível...

PT-2026-79386

Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.4.21 Description Unauthenticated remote attackers can execute arbitrary code due to a code injection flaw. This issue occurs when the analyse resultat skel function mishandles the X-Spip-Filtre HTTP request header. Thi...

CVE-2026-48172

LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation possibly to root, as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpaneljsonapifunc=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2/dev/null in Bash. If you get no output,...

Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

Fortinet has released out-of-band patches for a critical security flaw impacting FortiClient EMS that it said has been exploited in the wild. The vulnerability, tracked as CVE-2026-35616 CVSS score: 9.1, has been described as a pre-authentication API access bypass leading to privilege escalation...

Google Confirms CVE-2026-21385 in Qualcomm Android Component Exploited

Google on Monday disclosed that a high-severity security flaw impacting an open-source Qualcomm component used in Android devices has been exploited in the wild. The vulnerability in question is CVE-2026-21385 CVSS score: 7.8, a buffer over-read in the Graphics component. "Memory corruption when...

CVE-2025-66644

CVE-2025-66644 affects Array Networks ArrayOS AG before 9.4.5.9, with an OS command injection vulnerability that could allow an attacker to execute arbitrary commands. Exploitation has been observed in the wild between August and December 2025, impacting ArrayOS AG versions up to 9.4.5.8. Remedia...

CVE-2025-64446: Critical Vulnerability in Fortinet FortiWeb Exploited in the Wild

Overview On October 6, 2025, the cyber deception company Defused published a proof-of-concept exploit on social media that was captured by one of their Fortinet FortiWeb Manager honeypots. FortiWeb is a Web Application Firewall WAF product that is designed to detect and block malicious traffic to...

CVE-2023-53691

Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025...

PT-2025-42217

VestaCP commit a3f0fa1 2018-05-31 up to commit ee03eff 2018-06-13 contain embedded malicious code that resulted in a supply-chain compromise. New installations created from the compromised installer since at least May 2018 were subject to installation of Linux/ChachaDDoS, a multi-stage DDoS bot...