CVE-2026-102308

A Use after free vulnerability in the Views component of Google Chrome versions prior to 154.0.8037.92 allows a remote attacker to execute arbitrary code outside the sandbox. The attack can be initiated by leveraging social engineering to lead a user to a crafted HTML page . Exploitation details ...

EUVD-2026-89393

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89390

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102324

Google Chrome versions prior to 154.0.8037.92 are vulnerable to a Use after free flaw in the PictureInPicture component. A remote attacker who has already compromised the renderer process can exploit this vulnerability via a crafted HTML page to potentially execute arbitrary code outside the sand...

CVE-2026-102304

A use-after-free vulnerability in the Passwords component of Google Chrome (versions prior to 154.0.8037.92) allows a remote attacker to execute arbitrary code outside the sandbox . This can be triggered by a victim viewing a crafted HTML page . No specific exploit details or proof-of-concept lin...

EUVD-2026-89385

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89386

Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89388

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102316

A Use after free vulnerability exists in Views within Google Chrome versions prior to 154.0.8037.92 . A remote attacker utilizing social engineering can leverage a crafted HTML page to achieve arbitrary code execution outside the sandbox. No specific exploitation details or links are provided in ...

CVE-2026-102309

A use after free vulnerability exists in the FullScreen component of Google Chrome prior to version 154.0.8037.92 . A remote attacker can exploit this flaw by using a crafted HTML page to achieve arbitrary code execution outside the sandbox. While specific exploit details are not provided, the vu...

CVE-2026-102306

A use after free vulnerability exists in the Bluetooth component of Google Chrome prior to version 154.0.8037.92 . A remote attacker could potentially achieve arbitrary code execution outside the sandbox by interacting with a crafted HTML page. No specific exploit information or in-the-wild explo...

EUVD-2026-89378

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2025-1094-PoC-Postgre-SQLi

CVE-2025-1094 分析与模拟环境搭建 本详细分析于2025年3月14日进行，探讨了CVE-2025-1094（一个假设的高危PostgreSQL SQL注入漏洞），基于提供的模拟环境搭建和概念验证（PoC）执行。分析涵盖了漏洞介绍、根本原因、文件贡献、PoC步骤及缓解措施，并整合了模拟过程中的所有复杂细节。 漏洞介绍 CVE-2025-1094被描述为PostgreSQL中的一个严重SQL注入漏洞，影响17.3、16.7、15.11、14.16和13.19之前的版本，CVSS...

CVE-2026-43284

🚨 CVE-2026-43284 - Dirty Frag 🚨 Escalada local de privilegios universal en el kernel de Linux 📋 Resumen Dirty Frag también conocido como Copy Fail 2 es una vulnerabilidad de escalada local de privilegios de alto impacto en el kernel de Linux. Permite que un usuario local sin privilegios obtenga...

CVE-2024-38063

CVE-2024-38063 Windows Vulnerability that allows the implementation of unauthorised activity over the network: remote execution of Windows TCP/IP remote code. Two virtual machines - a victim and an attacker - are ready to simulate the attack. On the victim machine, a tool for capturing network...

CVE-2026-34926

⚠️ Aviso de Investigación de Seguridad y Responsabilidad Legal 📌 Propósito de este Repositorio Este repositorio se proporciona estrictamente para fines educativos, académicos y de investigación de ciberseguridad autorizada. Está destinado a apoyar la comprensión de: Vulnerabilidades de seguridad y...

CVE-2026-23918-poc

CVE-2026-23918 — Apache modhttp2 双重释放 影响: Apache HTTP Server 2.4.66 搭配 modhttp2 + Event MPM 修复版本: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 高 — 可能实现未认证的远程代码执行 CWE: CWE-415 双重释放 漏洞描述 Apache 2.4.66 中的 modhttp2 在 h2mplx.c:mstreamcleanup 函数中存在一个双重释放漏洞。当客户端在同一流上先发送 HEADERS 帧紧接着发送 RSTSTREAM...

detect-CVE-2019-15107-by-pyshark

detect-CVE-2019-15107-by-pyshark I. CVE-2019-15107 概述 Webmin 是一个基于 Web 的 Unix 系统管理界面。使用任何 Web 浏览器，我们可以设置用户帐户、Apache、DNS、文件共享等。 2019 年 8 月 10 日，土耳其网络安全研究员 Özkan Mustafa Akkuş 在 DefCon 上公开了此零日漏洞，同时发布了一个 Metasploit 模块以自动化利用该漏洞。由于 passwordchange.cgi 文件的密码重置功能中存在代码执行漏洞，允许第三方在无需输入验证的情况下执行恶意代码。 II. 受影响版...

Exploit-PoC-CVE-2021-40444-inject-ma-doc-vao-docx

CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...

cve-2022-42889-intercept

cve-2022-42889-intercept 低于 Java11版本的需要注意，更高的版本已经取消了Javascript解释器 本次方案针对 Java8 通过 jvm 启动参数 以及 jps pid进行拦截非法参数 quick start -----------------------load...... cve-2022-42889 check start cve-2022-42889 isdeepmatch org.apache.commons.text.StringSubstitutor md.getReturnType.getActualName java.lang.Stri...