CVE-2026-95365

A flaw was found in chromium-browser. A type confusion vulnerability in the IndexedDB component allows a remote attacker to execute arbitrary code within the browser sandbox. To exploit this flaw, an attacker must convince a user to open a specially crafted HTML page...

CVE-2026-95356

A flaw was found in chromium-browser. A use-after-free memory vulnerability in the WindowDialog component allows a remote attacker to execute arbitrary code outside the browser sandbox. By convincing a user to open a specially crafted HTML page, an attacker can exploit this flaw to compromise the...

CVE-2026-95343

A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free memory vulnerability—where previously released memory is improperly accessed—in the WebAudio component by convincing a user to view a specially crafted HTML page. Successful exploitation could allow the attacke...

CVE-2026-95335

A flaw was found in chromium-browser. A use-after-free vulnerability in the Human Interface Device HID component allows a remote attacker to execute arbitrary code outside the browser sandbox. By convincing a user to visit a specially crafted web page, an attacker who has already compromised the...

CVE-2026-95325

A flaw was found in the ANGLE component of chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from a use-after-free condition, which occurs when memory is referenc...

CVE-2026-95322

A flaw was found in chromium-browser. An out-of-bounds write vulnerability in the graphics processing unit GPU component allows a remote attacker to execute arbitrary code outside the browser sandbox. By enticing a user to view a specially crafted HTML page, an attacker who has already compromise...

CVE-2026-95299

A flaw was found in chromium-browser. A use-after-free memory corruption vulnerability exists within the Graphics Processing Unit GPU component. A remote attacker could exploit this flaw by enticing a user to visit a specially crafted web page. Successful exploitation could allow the attacker to...

CVE-2026-95283

A flaw was found in the Tint component of chromium-browser. This buffer overflow allows a remote attacker to execute arbitrary code outside the browser sandbox by convincing a user to view a specially crafted web page. Successful exploitation could compromise the host system by bypassing standard...

CVE-2018-16763

CVE-2018-16763 CVE-2018-16763 FuelCMS 1.4 원격 코드 실행, 이 버전의 FuelCMS는 현재까지도 취약합니다...

CVE-2019-18935

CVE-2019-18935 Telerik UI for ASP.NET AJAX의 .NET JSON 역직렬화 취약점에 대한 개념 증명 익스플로잇으로, 원격 코드 실행을 가능하게 합니다. 설명 Telerik UI for ASP.NET AJAX는 웹 애플리케이션을 위한 널리 사용되는 UI 구성 요소 모음입니다. 이는 JSON 객체를 안전하지 않은 방식으로 역직렬화하여 소프트웨어의 기본 호스트에서 임의의 원격 코드 실행을 초래합니다. 자세한 내용은 다음을 참조하세요: DerpCon 강연 .NET Roulette 슬라이드는 안전하지 않은...

CVE-2021-46422

CVE-2021-46422 SDT-CW3B1 1.1.0 - OS 명령 주입 Exploit 제목: SDT-CW3B1 1.1.0 - OS 명령 주입 공급업체 홈페이지: http://telesquare.co.kr/ CVE : CVE-2021-46422 CVE 설명: Telesquare SDT-CW3B1 1.1.0은 OS 명령 주입 취약점의 영향을 받으며, 원격 공격자가 인증 없이 OS 명령을 실행할 수 있습니다. 인증 필요: 아니요...

CVE-2009-0182

VUPlayer 2.49 로컬 버퍼 오버플로를 통한 임의 코드 실행 프로그램 버전: VUPlayer 2.49 취약점: .wax 재생 목록 파일을 가져올 때 로컬 버퍼 오버플로가 발생하여 임의 코드 실행으로 이어짐 공격 방법: 로컬 버퍼 오버플로 CVE: CVE-2009-0182 VUPlayer2.49poc.py : DEP 보호 우회 없음 VUPlayer2.49pocbypassDEP.py : ROP 체인을 사용하여 DEP 보호 우회 PoC 동영상: https://youtu.be/HgD7gOgiIFE DEP 우회를 만드는 단계별...

CVE-2021-39273-CVE-2021-39274

CVE-2021-39273 XeroSecurity Sn1per 9.0무료 버전에서는 애플리케이션 실행 시 안전하지 않은 권한0777이 설정되어, 권한이 없는 사용자가 애플리케이션, 모듈 및 구성 파일을 수정할 수 있습니다. 이로 인해 루트 권한으로 임의 코드 실행이 가능합니다. CVE-2021-39274 XeroSecurity Sn1per 9.0무료 버전에서는 설치 중에 안전하지 않은 디렉터리 권한0777이 설정되어, 권한이 없는 사용자가 메인 애플리케이션과 애플리케이션 구성 파일을 수정할 수 있습니다. 이로 인해 루트 권한으...

CVE-2026-95372

A flaw was found in the Chromecast component of chromium-browser. This vulnerability can lead to arbitrary code execution outside the browser's security sandbox. A remote attacker who has already compromised the renderer process could trigger a use-after-free memory flaw by convincing a user to...

CVE-2026-95345

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to achieve arbitrary code execution inside the restricted sandbox environment by enticing a user to open a specially crafted HTML page. The issue is caused by a use-after-free condition in the Actor component, where...

CVE-2026-95338

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code within the browser's sandbox by convincing a user to open a specially crafted PDF document. This issue is caused by a use-after-free vulnerability in the PDFium component, where memory is improperly accessed after ...

CVE-2026-95334

A flaw was found in chromium-browser. Incorrect reference resolution in the WebProtect feature allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the browser sandbox. By convincing a user to load a specially crafted HTML page, the...

CVE-2026-79657

A flaw was found in NLTK. This vulnerability allows a remote attacker to achieve arbitrary code execution by supplying a specially crafted model or tokenizer artifact for the application to process. The issue occurs because the deserialization allowlist mechanism permits entire software namespace...

nuclei-template-cve-2025-31324-check

SAP CVE-2025-31324 확인 개요 이 템플릿은 SAP NetWeaver CVE-2025-31324 취약점의 존재 여부를 확인하기 위해 설계되었습니다. 이 취약점은 인증되지 않은 사용자가 /developmentserver/metadatauploader 엔드포인트를 통해 JSP 파일을 업로드할 수 있게 하여 잠재적인 원격 코드 실행으로 이어질 수 있습니다. 실행 방법 사전 요구 사항 Nuclei가 설치되어 있는지 확인하십시오. 템플릿 파일을 sap-netweaver-cve-2025-31324-check.yaml로...

Go-Get-RCE-CVE-2018-6574-POC

CVE-2018-6574 POC 링크 https://nvd.nist.gov/vuln/detail/CVE-2018-6574 http://blog.nsfocus.net/cve-2018-6574/ 실행 go get github.com/neargle/CVE-2018-6574-POC 상세 payload 위치: https://github.com/neargle/CVE-2018-6574-POC/blob/master/calc.cL10 이제 CGO 기능을 사용하여 모든 플랫폼을 지원합니다. linux go get 후 /tmp/go-rce-poc...