Lucene search
+L

592061 matches found

NVD
NVD
•added 2026/09/29 8:17 p.m.•7 views

CVE-2026-102304

Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

9.6CVSS0.0031EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/29 8:17 p.m.•9 views

CVE-2026-102301

Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS0.0028EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/29 8:17 p.m.•4 views

DEBIAN-CVE-2026-102299

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS7AI score0.00407EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/29 8:17 p.m.•9 views

CVE-2026-102299

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00407EPSS
SaveExploits0References2
OSV
OSV
•added 2026/09/29 8:17 p.m.•5 views

DEBIAN-CVE-2026-102301

Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS7AI score0.0028EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/29 8:17 p.m.•7 views

CVE-2024-31026

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

9.8CVSS0.00589EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/29 8:01 p.m.•6 views

CVE-2026-102875 VLC media player before 3.0.24 Path Traversal via skins2

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

8.5CVSS6.3AI score0.00167EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/09/29 8:01 p.m.•57 views

CVE-2026-102875 VLC media player before 3.0.24 Path Traversal via skins2

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

8.5CVSS0.00167EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/09/29 8:01 p.m.•8 views

EUVD-2026-89410

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

8.5CVSS6.3AI score0.00167EPSS
SaveExploits0References5
CVE
CVE
•added 2026/09/29 8:01 p.m.•20 views

CVE-2026-102875

VLC media player before version 3.0.24 is vulnerable to a path traversal vulnerability within the skins2 ThemeLoader . The root cause is a failure to validate member names in .vlt skin archives , which allows an attacker to craft malicious skin files containing path traversal sequences. This can ...

8.5CVSS6.3AI score0.00167EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2026/09/29 8:01 p.m.•8 views

CVE-2026-102875

VLC media player before 3.0.24 contains a path traversal vulnerability in the skins2 ThemeLoader that fails to validate member names in .vlt skin archives. Attackers can craft malicious skin files with path traversal sequences to write arbitrary files with VLC user privileges, enabling code...

8.5CVSS6.3AI score0.00167EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/29 7:55 p.m.•12 views

CVE-2025-66478-Exploit-Poc

Next.js CVE-2025-66478 PoC English | 한국어 이 저장소는 Next.js CVE-2025-66478 취약점을 재현하고 연구하기 위한 PoC개념 증명 프로젝트입니다. 취약점이 존재하는 Next.js 애플리케이션과, 해당 취약점을 테스트할 수 있는 Python 익스플로잇 스크립트로 구성되어 있습니다. CVE-2025-66478 란? Next.js의 Server Actions 처리 과정에서 발생하는 원격 코드 실행RCE 취약점입니다. 핵심 요약: 근본 원인 Root Cause : RSCReact Serve...

7.8AI score
SaveExploits112References3
Debian CVE
Debian CVE
•added 2026/09/29 7:45 p.m.•11 views

CVE-2026-102327

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

7.5CVSS6.8AI score0.00273EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/09/29 7:45 p.m.•8 views

CVE-2026-102327

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

6.8AI score0.00273EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/29 7:45 p.m.•12 views

EUVD-2026-89401

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

7.5CVSS6.8AI score0.00273EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/29 7:45 p.m.•52 views

CVE-2026-102327

An incorrect authorization flaw exists in the WebView component of Google Chrome on Android prior to version 154.0.8037.92 . This vulnerability allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the sandbox by serving a crafted ...

7.5CVSS6.8AI score0.00273EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/09/29 7:45 p.m.•41 views

CVE-2026-102327

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

0.00273EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/29 7:45 p.m.•8 views

EUVD-2026-89398

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS7AI score0.00339EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/29 7:45 p.m.•51 views

CVE-2026-102302

A buffer overflow vulnerability exists in the V8 engine of Google Chrome versions prior to 154.0.8037.92 . A remote attacker can exploit this flaw by serving a crafted HTML page to execute arbitrary code within the browser sandbox. Exploitation details are not provided in the documents.

8.8CVSS7.1AI score0.00348EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/09/29 7:45 p.m.•13 views

CVE-2026-102321

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS7AI score0.00339EPSS
SaveExploits0
Rows per page
Query Builder