EUVD-2026-89231

Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95373

Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95373

Use after free in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95274

Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95277

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89232

Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95283

Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-95298

Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

CVE-2026-95329

Out of bounds write in WebGL in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-95339

A use after free vulnerability exists in the ServiceWorker component of Google Chrome prior to version 154.0.8037.57 . This flaw allows a remote attacker to execute arbitrary code outside the sandbox by leveraging a crafted HTML page. The impact is categorized as Critical by Chromium security. Re...

CVE-2026-95281

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

IHxExec

IHxExec POC to execute arbitrary code on behalf of another user. U can read more about the technique here: https://cicada-8.medium.com/process-injection-is-dead-long-live-ihxhelppaneserver-af8f20431b5d https://www.youtube.com/watch?v=bK3ufqZxkxc Note the attached video:...

CVE-2021-40870

CVE-2021-40870 Carga sin restricciones de archivos con tipo peligroso en Aviatrix permite a un usuario autenticado ejecutar código arbitrario https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...

CVE-2023-27350

CVE-2023-27350 Exploit POC Este es un exploit de prueba de concepto POC para CVE-2023-27350, una vulnerabilidad encontrada en PaperCut MF/NG que permite a un atacante no autenticado ejecutar código arbitrario con privilegios de SYSTEM. Requisitos Antes de usar este exploit, asegúrate de tener...

CVE-2024-48990-PoC

PoC para CVE-2024-48990 en needrestart solo con fines educativos https://www.qualys.com/2024/11/19/needrestart/needrestart.txt ¿Cómo ejecutarlo? Ejecutar ./start.sh compilará la librería importlib falsa e iniciará un script que espera a que needrestart sea ejecutado por root. Después abrirá una...

PS4-5.05-Kernel-Exploit

PS4 5.05 Kernel Exploit Resumen En este proyecto encontrarás una implementación completa del segundo exploit de kernel "bpf" para la PlayStation 4 en la versión 5.05. Te permitirá ejecutar código arbitrario como kernel, para permitir el jailbreak y modificaciones a nivel de kernel del sistema. Es...

cacti-rce-cve-2022-46169-vulnerable-application

Aplicación vulnerable de inyección de comandos en Cacti v1.2.22 CVE-2022-46169 Esta es una aplicación vulnerable para probar el exploit de la vulnerabilidad Cacti CVE-2022-46169. ¡ADVERTENCIA! Esta aplicación contiene vulnerabilidades de seguridad graves. ¡Úsela bajo su propio riesgo! Se recomien...

CVE-2022-26134

CVE-2022-26134 - Vulnerabilidad de inyección OGNL. En las versiones afectadas de Confluence Server y Data Center, existe una vulnerabilidad de inyección OGNL que permitiría a un atacante no autenticado ejecutar código arbitrario en una instancia de Confluence Server o Data Center. PoC: git clone...

CVE-2026-92368

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...

CVE-2026-78683

A flaw was found in NLTK. This vulnerability allows arbitrary code execution due to unsafe deserialization, where data loaded from storage is converted back into active objects without adequate restrictions. When the TransitionParser component processes a model file, it fails to enforce safe...