CVE-2026-95355

Incorrect authorization in Navigation in Google Chrome on on iOS prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95310

Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95329

Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95322

Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95349

Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95339

A use after free vulnerability exists in the ServiceWorker component of Google Chrome prior to version 154.0.8037.57 . This flaw allows a remote attacker to execute arbitrary code outside the sandbox by leveraging a crafted HTML page. The impact is categorized as Critical by Chromium security. Re...

CVE-2026-95281

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95350

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2024-48990-PoC

needrestart의 CVE-2024-48990 PoC 교육 목적으로만 사용하십시오 https://www.qualys.com/2024/11/19/needrestart/needrestart.txt 실행 방법? ./start.sh을 실행하면 가짜 importlib 라이브러리를 컴파일하고, 루트에 의해 needrestart가 실행되기를 기다리는 스크립트를 시작합니다. 이후 셸을 실행합니다...

cacti-rce-cve-2022-46169-vulnerable-application

Cacti v1.2.22 명령어 삽입 CVE-2022-46169 취약 애플리케이션 Cacti 취약점CVE-2022-46169을 테스트하기 위한 취약 애플리케이션입니다. 경고! 이 애플리케이션은 심각한 보안 취약점을 포함하고 있습니다. 사용 시 위험을 감수하세요! 백업되고 격리된 환경예: 최근 스냅샷 및 호스트 전용 네트워킹을 사용하는 VM에서 실행하는 것이 좋습니다. 이 애플리케이션을 인터넷에 노출된 서버에 업로드하지 마십시오. 해당 서버는 침해될 것입니다. 면책 조항 : 누군가 이 애플리케이션을 사용하는 방식에 대해 저는 책...

CVE-2026-92368

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...

CVE-2026-78683

A flaw was found in NLTK. This vulnerability allows arbitrary code execution due to unsafe deserialization, where data loaded from storage is converted back into active objects without adequate restrictions. When the TransitionParser component processes a model file, it fails to enforce safe...

CVE-2022-1388

F5-CVE-2022-1388-Exploit CVE 2022-1388을 위한 익스플로잇 및 점검 스크립트 사용법 / | | | || | / | |/ / \ / | | || || | | / /| | | || | ' / /'| |/' |' / /'' / /'| | / / \ V / \ V / | | | | | || ||| / / | /| | / / / / ||| | \ \ / \ / \ | /\ / /| | ./ /\ |/ /./ /./ / | |./ /| || || || | / / / / / // // ...

CVE-2025-60751

CVE-2025-60751 CVE-2025-60751에 대한 PoC 영향받는 제품: Geographiclib = v2.5.1 전체 상세 분석 글은 https://zer0matt.blogspot.com/2026/05/cve-2025-60751-geographiclib-stack.html에서 확인할 수 있습니다. 설명 GeoConvert가 조작된 입력을 받을 때 스택 버퍼 오버플로우가 발생합니다. 이 오버플로우는 프로그램이 내부 인덱스를 제대로 검증하지 않아 스택에 경계를 벗어난 쓰기를 허용하기 때문에 발생합니다. 공격자는 이...

EUVD-2026-89021

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...

USN-8844-1 c-ares vulnerability

It was discovered that c-ares incorrectly handled certain query completion callbacks. An attacker could possibly use this issue to trigger a use- after-free or double-free, resulting in a denial of service or arbitrary code execution...

USN-8844-1: c-ares vulnerability

It was discovered that c-ares incorrectly handled certain query completion callbacks. An attacker could possibly use this issue to trigger a use- after-free or double-free, resulting in a denial of service or arbitrary code execution...

CVE-2026-102566 CTranslate2 before 4.8.1 Heap Buffer Overflow via model.bin

CTranslate2 before 4.8.1 contains a heap-based buffer overflow in the binary model loader that fails to validate payload length against allocated buffer size. Attackers can craft malicious model files with oversized payload lengths to write past heap allocation boundaries, causing crashes or...

CVE-2026-102566

CTranslate2 versions prior to 4.8.1 are vulnerable to a heap-based buffer overflow within the binary model loader. The root cause is a failure to validate the payload length against the allocated buffer size when processing model.bin files. An attacker can craft malicious model files with oversiz...

USN-8843-1: FreeIPMI vulnerabilities

It was discovered that FreeIPMI incorrectly handled certain malformed Fujitsu SEL long-text responses, leading to a stack-based buffer overflow. An attacker in control of a malicious IPMI device could possibly use this issue to cause FreeIPMI to crash, resulting in a denial of service, or possibl...