EUVD-2026-93797

Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-106358

Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106382

Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106382

A Use after free vulnerability in the Chromecast component of Google Chrome (versions prior to 155.0.8059.39 ) allows a remote attacker to execute arbitrary code outside the sandbox. The attack can be initiated by navigating to a crafted HTML page . No specific exploit links or details are provid...

cloudpanel-2.4.2-CVE-2024-44765-recovery

CVE-2024-44765 是一个存在于 MGT-COMMERCE GmbH CloudPanel 2.0.0 至 2.4.2 版本中的授权不当（访问控制配置错误）漏洞 1. 在每个文件夹中按照说明进行操作（此步骤应在本地完成） 2. 重置密码和访问权限 对于 root $ sudo passwd root 而对于用户 $ getent passwd | grep -vE "nologin|false" | cut -d: -f1 $ sudo passwd 3. 移除未授权访问 $ getent passwd | grep -vE "nologin|false" | cut -d:...

CVE-2019-16724

漏洞描述 File Sharing Wizard 1.5.0 允许远程攻击者通过利用HTTP POST参数中基于结构化异常处理程序（SEH）的缓冲区溢出，实现任意代码执行。 此漏洞利用已在Windows 7 Home上测试。在其他平台上肯定会失效。主要用于研究目的。...

EUVD-2026-93778

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...

CVE-2026-80852

A flaw was found in the Linux kernel's TLS device driver. A local attacker could exploit an out-of-bounds write vulnerability in the tlsappendfrag function when handling TLSTXZEROCOPYRO with spliceSPLICEFMORE operations. This flaw allows an attacker to cause memory corruption, leading to a denial...

FreeRDP-Out-of-Bounds-Read-CVE-2024-32459-

FreeRDP-Out-of-Bounds-Read-CVE-2024-32459- La vulnerabilidad FreeRDP-Out-of-Bounds-Read-CVE-2024-32459 es un fallo de seguridad descubierto en FreeRDP, un programa de código abierto utilizado para implementar el Protocolo de Escritorio Remoto RDP Esta vulnerabilidad surge de debilidades en el...

objdump-Out-Of-Bounds-write

GNU Binutils objdump — OOB Write → FSOP → Ejecución de código arbitrario Objetivo: GNU Binutils todas las versiones hasta HEAD — objdump Entorno: Debian 13 Trixie, glibc 2.41, x8664 Impacto: Ejecución de código arbitrario Vector: Archivo ELF manipulado procesado por objdump -g ASLR: Evitado delta...

CVE-2026-90111

A flaw was found in the Linux kernel's IPv6 multicast routing ip6mr component. This use-after-free vulnerability occurs when a non-refcounted destination entry is improperly handled after being freed. A remote attacker could potentially exploit this by sending specially crafted IPv6 multicast...

CVE-2026-90036

A flaw was found in the Linux kernel's Network File System Daemon NFSD. A use-after-free vulnerability can occur during the blocked-lock reaping process. This happens when a client's lock owner, without a proper reference to keep the client alive, leads to the client being prematurely freed. This...

CVE-2023-30547

CVE-2023-30547 Descripción de la vulnerabilidad vm2 es un sandbox que puede ejecutar código no confiable con los módulos integrados de Node en lista blanca. Existe una vulnerabilidad en la sanitización de excepciones de vm2 para versiones hasta la 3.9.16, que permite a los atacantes lanzar una...

Important: Red Hat Security Advisory: dovecot security, bug fix, and enhancement update

An update for dovecot is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

dovecot: Dovecot: Arbitrary Code Execution via Sieve editheader use-after-free

A flaw was found in Dovecot. An authenticated attacker can use a Sieve script with the editheader extension to trigger a use-after-free vulnerability in the mail editing code. This can lead to memory corruption, potentially crashing the mail delivery process and allowing for arbitrary code...

printix-CVE-2022-29554

CVE-2022-29554 Publicación simple | Versión para imprimir Una vulnerabilidad de "Manejo incorrecto de entrada a la API" o "Método o función peligrosos expuestos" en PrintixService.exe, en la "Gestión de impresión segura en la nube de Printix" de Kofax Printix, versión 1.3.1156.0 e inferiores,...

CVE-2024-37054-PoC

Descripción Prueba de concepto para CVE-2024-37054, una vulnerabilidad crítica de deserialización en MLflow versiones 0.9.0 a 2.14.1. Cuando un modelo malicioso pyfunc se carga mediante mlflow.pyfunc.loadmodel, el payload pickled ejecuta código arbitrario. Archivos exploit.py — exploit completo:...

CVE-2024-48990-PoC

针对 CVE-2024-48990 在 needrestart 中的 PoC 仅用于教育目的 https://www.qualys.com/2024/11/19/needrestart/needrestart.txt 如何运行？ 运行 ./start.sh 将编译伪造的 importlib 库，并启动一个脚本等待 root 用户执行 needrestart。之后将弹出一个 shell。...

cve-2024-4367-PoC-fixed

cve-2024-4367-PoC-fixed PDF.js是由Mozilla维护的基于JavaScript的PDF查看器。此漏洞允许攻击者在打开恶意 PDF 文件后立即执行任意 JavaScript 代码。这会影响所有 Firefox 用户 （126），因为 Firefox 使用 PDF.js 来显示 PDF 文件，但也严重影响了许多基于 Web 和 Electron 的应用程序，这些应用程序（间接）使用 PDF.js 进行预览功能。...

IHxExec

IHxExec 一个POC（概念验证），用于代表另一个用户执行任意代码。你可以在这里了解更多关于该技术的信息： https://cicada-8.medium.com/process-injection-is-dead-long-live-ihxhelppaneserver-af8f20431b5d https://www.youtube.com/watch?v=bK3ufqZxkxc 注意附带的视频： https://github.com/CICADA8-Research/IHxExec/blob/main/demo.mkv 使用方法 .\IHxExec.exe -s -c Ex...