CVE-2026-106412

Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106293

Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-93797

Incorrect Authorization in SiteIsolation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-106358

Use after free in Navigation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106382

Use after free in Chromecast in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-106382

A Use after free vulnerability in the Chromecast component of Google Chrome (versions prior to 155.0.8059.39 ) allows a remote attacker to execute arbitrary code outside the sandbox. The attack can be initiated by navigating to a crafted HTML page . No specific exploit links or details are provid...

cloudpanel-2.4.2-CVE-2024-44765-recovery

CVE-2024-44765 is an Improper Authorization Access Control Misconfiguration vulnerability in MGT-COMMERCE GmbH CloudPanel versions 2.0.0 to 2.4.2 1. Follow instructions in every folder this should be done locally 2. Reset Passwords and Access for root $ sudo passwd root while for users $ getent...

CVE-2019-16724

Vulnerability Description File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler SEH based buffer overflow in an HTTP POST parameter. This exploit was tested on windows 7 Home. It will certainly break when on other...

EUVD-2026-93778

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...

CVE-2026-80852

A flaw was found in the Linux kernel's TLS device driver. A local attacker could exploit an out-of-bounds write vulnerability in the tlsappendfrag function when handling TLSTXZEROCOPYRO with spliceSPLICEFMORE operations. This flaw allows an attacker to cause memory corruption, leading to a denial...

FreeRDP-Out-of-Bounds-Read-CVE-2024-32459-

FreeRDP-Out-of-Bounds-Read-CVE-2024-32459- The FreeRDP-Out-of-Bounds-Read-CVE-2024-32459 vulnerability is a security flaw discovered in FreeRDP, an open-source program used for implementing the Remote Desktop Protocol RDP This vulnerability arises from input processing weaknesses, allowing an...

objdump-Out-Of-Bounds-write

GNU Binutils objdump — OOB Write → FSOP → Arbitrary Code Execution Target: GNU Binutils all versions through HEAD — objdump Environment: Debian 13 Trixie, glibc 2.41, x8664 Impact: Arbitrary code execution Vector: Crafted ELF file processed by objdump -g ASLR: Bypassed deterministic mmap delta...

CVE-2026-90111

A flaw was found in the Linux kernel's IPv6 multicast routing ip6mr component. This use-after-free vulnerability occurs when a non-refcounted destination entry is improperly handled after being freed. A remote attacker could potentially exploit this by sending specially crafted IPv6 multicast...

CVE-2026-90036

A flaw was found in the Linux kernel's Network File System Daemon NFSD. A use-after-free vulnerability can occur during the blocked-lock reaping process. This happens when a client's lock owner, without a proper reference to keep the client alive, leads to the client being prematurely freed. This...

CVE-2023-30547

CVE-2023-30547 Vulnerability description vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versions up to 3.9.16, allowing attackers to raise an unsanitized host exception inside handleException...

Important: Red Hat Security Advisory: dovecot security, bug fix, and enhancement update

An update for dovecot is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

dovecot: Dovecot: Arbitrary Code Execution via Sieve editheader use-after-free

A flaw was found in Dovecot. An authenticated attacker can use a Sieve script with the editheader extension to trigger a use-after-free vulnerability in the mail editing code. This can lead to memory corruption, potentially crashing the mail delivery process and allowing for arbitrary code...

printix-CVE-2022-29554

CVE-2022-29554 Simple Release | Print Friendly A "Mishandling of Input to API" or "Exposed Dangerous Method or Function" vulnerability in PrintixService.exe, in Kofax Printix's "Printix Secure Cloud Print Management", Version 1.3.1156.0 and below allows a Local Or Remote attacker the ability to...

CVE-2024-37054-PoC

Description Proof of concept for CVE-2024-37054, a critical deserialization vulnerability in MLflow versions 0.9.0 to 2.14.1. When a malicious pyfunc model is loaded via mlflow.pyfunc.loadmodel, the pickled payload executes arbitrary code. Files exploit.py — full exploit: register, train, upload,...

CVE-2024-48990-PoC

PoC for CVE-2024-48990 in needrestart educational purposes only https://www.qualys.com/2024/11/19/needrestart/needrestart.txt How to run? Running ./start.sh will compile the fake importlib library and start a script that waits for needrestart to be executed by root. It will pop a shell afterwards...