CVE-2026-95310

Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95329

Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95322

Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95349

Buffer overflow in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95339

A use after free vulnerability exists in the ServiceWorker component of Google Chrome prior to version 154.0.8037.57 . This flaw allows a remote attacker to execute arbitrary code outside the sandbox by leveraging a crafted HTML page. The impact is categorized as Critical by Chromium security. Re...

CVE-2026-95281

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95350

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2024-48990-PoC

针对 CVE-2024-48990 在 needrestart 中的 PoC 仅用于教育目的 https://www.qualys.com/2024/11/19/needrestart/needrestart.txt 如何运行？ 运行 ./start.sh 将编译伪造的 importlib 库，并启动一个脚本等待 root 用户执行 needrestart。之后将弹出一个 shell。...

cacti-rce-cve-2022-46169-vulnerable-application

Cacti v1.2.22 命令注入 CVE-2022-46169 漏洞应用 这是一个用于测试 Cacti 漏洞（CVE-2022-46169 ）利用的易受攻击应用。 警告！ 此应用包含严重的安全漏洞。运行风险自负！建议在备份且隔离的环境（如已创建近期快照并仅使用主机网络模式的虚拟机）中运行。请勿将此应用部署到任何面向互联网的服务器，否则它们将被攻破。 免责声明 ：本人对任何人使用此应用的方式概不负责。此应用的唯一用途是作为 CVE-2022-46169 漏洞利用的测试场景，不得恶意使用。如果您的服务器因安装此应用而被攻破，责任不在于我，而在于上传并安装它的人员。 漏洞信息 CVE-ID...

CVE-2026-92368

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...

CVE-2026-78683

A flaw was found in NLTK. This vulnerability allows arbitrary code execution due to unsafe deserialization, where data loaded from storage is converted back into active objects without adequate restrictions. When the TransitionParser component processes a model file, it fails to enforce safe...

CVE-2022-1388

F5-CVE-2022-1388-Exploit CVE 2022-1388 的利用和检查脚本 使用方法 / | | | || | / | |/ / \ / | | || || | | / /| | | || | ' / /'| |/' |' / /'' / /'| | / / \ V / \ V / | | | | | || ||| / / | /| | / / / / ||| | \ \ / \ / \ | /\ / /| | ./ /\ |/ /./ /./ / | |./ /| || || || | / / / / / // // \ /...

CVE-2025-60751

CVE-2025-60751 CVE-2025-60751 的 PoC 受影响产品：Geographiclib = v2.5.1 完整分析文章见 https://zer0matt.blogspot.com/2026/05/cve-2025-60751-geographiclib-stack.html 描述 当 GeoConvert 接收特制输入时，会发生栈缓冲区溢出。 溢出发生的原因是程序未正确验证内部索引，从而允许在栈上进行越界写入。 攻击者可通过覆盖返回地址，使其指向 libc 函数（ret2libc），并利用 ROP 链执行任意代码，从而劫持程序的执行流程。 用法 python3...

EUVD-2026-89021

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...

USN-8844-1 c-ares vulnerability

It was discovered that c-ares incorrectly handled certain query completion callbacks. An attacker could possibly use this issue to trigger a use- after-free or double-free, resulting in a denial of service or arbitrary code execution...

USN-8844-1: c-ares vulnerability

It was discovered that c-ares incorrectly handled certain query completion callbacks. An attacker could possibly use this issue to trigger a use- after-free or double-free, resulting in a denial of service or arbitrary code execution...

CVE-2026-102566 CTranslate2 before 4.8.1 Heap Buffer Overflow via model.bin

CTranslate2 before 4.8.1 contains a heap-based buffer overflow in the binary model loader that fails to validate payload length against allocated buffer size. Attackers can craft malicious model files with oversized payload lengths to write past heap allocation boundaries, causing crashes or...

CVE-2026-102566

CTranslate2 versions prior to 4.8.1 are vulnerable to a heap-based buffer overflow within the binary model loader. The root cause is a failure to validate the payload length against the allocated buffer size when processing model.bin files. An attacker can craft malicious model files with oversiz...

USN-8843-1: FreeIPMI vulnerabilities

It was discovered that FreeIPMI incorrectly handled certain malformed Fujitsu SEL long-text responses, leading to a stack-based buffer overflow. An attacker in control of a malicious IPMI device could possibly use this issue to cause FreeIPMI to crash, resulting in a denial of service, or possibl...

USN-8843-1 freeipmi vulnerabilities

It was discovered that FreeIPMI incorrectly handled certain malformed Fujitsu SEL long-text responses, leading to a stack-based buffer overflow. An attacker in control of a malicious IPMI device could possibly use this issue to cause FreeIPMI to crash, resulting in a denial of service, or possibl...