CVE-2025-55182-realistic-poc

CVE-2025-55182: React Server Components RCE A minimal proof of concept demonstrating the critical Remote Code Execution vulnerability in [email protected]. What is CVE-2025-55182? A pre-authentication RCE vulnerability in React Server Components that allows attackers to execute arbitrary cod...

CVE-2026-103623

A flaw was found in the MediaStream component of chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution within the browser's sandbox by enticing a user to visit a specially crafted HTML page. The issue stems from a use-after-free condition, where the...

[SECURITY] [DSA 6540-1] radsecproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6540-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 02, 2026 https://www.debian.org/security/faq -...

CVE-2025-59528-PoC

CVE-2025-59528 PoC 격리된 실험실 환경에서 CVE-2025-59528 을 연구하기 위한 개념 증명PoC입니다. !WARNING 면책 조항 이 프로젝트는 교육 목적, 보안 연구, 그리고 귀하가 소유했거나 명시적 테스트 승인을 받은 시스템 테스트 를 위해서만 엄격히 사용해야 합니다. 소유자의 허가 없이 이 PoC를 제3자 서버, 공공 서비스 또는 인프라에 사용하지 마십시오. 저자는 이 프로젝트의 오용으로 인한 손해, 데이터 손실, 서비스 중단 또는 법적 결과에 대해 책임을 지지 않습니다. 설명 이 PoC는...

CVE-2026-103625

A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution within the browser's restricted sandbox environment by enticing a user to visit a specially crafted HTML page. This issue is caused by a type confusion vulnerability in the V8 JavaScript engine...

CVE-2026-104843

A flaw was found in uv. An attacker could achieve arbitrary code execution on a Windows system by tricking a user into installing a specially crafted Python wheel package. During archive extraction, files can be written outside the intended target directory, allowing an attacker to place maliciou...

CVE-2026-103624

A flaw was found in chromium-browser. A remote attacker who has already compromised the renderer process could exploit a use-after-free vulnerability accessing memory after it has been freed in the Contextual Tasks component by convincing a user to visit a crafted HTML page. Successful exploitati...

CVE-2026-30754

A flaw was found in FFmpeg. This memory corruption vulnerability occurs during the Real-time Transport Protocol RTP encoding of H.264/HEVC streams. A remote attacker could exploit this by providing a specially crafted input file, leading to a negative size parameter being passed to a memory copy...

VertXploit

VertXploit HID VertX 및 EDGE 출입 통제 시스템 공격 요약 VertXploit는 HID VertX 및 EDGE 출입 통제 시스템을 공격하는 데 사용할 수 있는 도구입니다. discoveryd 서비스에는 시스템 호출을 실행하기 전에 사용자 데이터를 검증하지 않는 취약점이 존재합니다. 이로 인해 인증 없이 HID VertX 및 EDGE 출입 통제 시스템에서 임의 코드 실행이 가능합니다. 자세한 내용은 명령 주입 섹션을 참조하십시오. VertXploit는 출입 통제 시스템에 연결된 문을 잠금 해제하거나 잠그고,...

CVE-2026-103626

Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-103628

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-91714

Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-103623

Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-103626

Incorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-103626

Google Chrome on Windows versions prior to 154.0.8037.97 is vulnerable to a High severity flaw in the FileSystem component. Due to an incorrect authorization issue, a remote attacker can leverage social engineering to trick a user into interacting with a crafted HTML page . This interaction could...

CVE-2026-92955

A flaw was found in vm2. This vulnerability allows an attacker running untrusted code within the sandbox to achieve arbitrary code execution on the host system. By accessing internal host properties through standard output streams, the untrusted code can manipulate process event handlers and esca...

CVE-2026-94084

An invalid memory reference vulnerability exists in Suricata's HTTP/2 application-layer engine during multi-buffer management Http2ThreadMultiBuf. When inspected HTTP/2 response traffic triggers signature rules that evaluate the http.responseheader keyword simultaneously with and without sticky...

AZL-105923 CVE-2026-94422 affecting package xdg-dbus-proxy 0.1.6-2

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

CVE-2026-94422

An incorrect implementation of message filtering in xdg-dbus-proxy versions before 0.1.9 allows an attacker to bypass the intended message filtering on the D-Bus session bus by setting a reply serial number on non-reply messages. A malicious or compromised Flatpak app could use this to achieve...

pcre2: pcre2: Out-of-bounds write via crafted regular expression

A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code execution, corrupt...