CVE-2026-113180

A flaw was found in the ContentCapture component of Google Chrome on Android. This memory corruption vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a victim to open a specially crafted HTML page...

CVE-2026-113173

A flaw was found in Google Chrome. This vulnerability allows a remote attacker to execute arbitrary code within the sandbox an isolated security environment by convincing a user to visit a crafted HTML page. The issue is caused by improper input validation in the user interface UI component...

CVE-2026-113172

A flaw was found in chromium-browser. A memory corruption vulnerability in the ServiceWorker component allows a remote attacker to execute arbitrary code within the browser sandbox by tricking a user into visiting a crafted HTML page. Successful exploitation compromises the browser's isolated...

CVE-2026-113169

A flaw was found in the WebAppInstalls component of Google Chrome on Android. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, triggering memory corruption. Successful exploitation allows the attacker to execute arbitrary code outside o...

CVE-2026-113175

A flaw was found in chromium-browser. Due to improper input validation in the FileSystem component, a remote attacker can convince a user to visit a specially crafted HTML page to achieve arbitrary code execution. Successful exploitation allows the attacker to run unauthorized commands within the...

CVE-2026-113146

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code inside the browser's sandbox environment due to a memory corruption vulnerability in the Performance Application Programming Interfaces APIs. Exploitation is achieved by convincing a user to visit a...

CVE-2026-113171

A flaw was found in the Prompts component of Google Chrome. This vulnerability allows a remote attacker to achieve arbitrary code execution outside the browser's restricted security environment sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from memory...

CVE-2026-113167

A flaw was found in the Chromium Network component. This vulnerability allows a remote attacker to potentially execute arbitrary code within the browser's restricted sandbox environment. By convincing a victim to load a specially crafted HTML page, an attacker can trigger a memory corruption...

CVE-2026-113118

A flaw was found in chromium-browser. A memory corruption vulnerability in the Extensions component allows a remote attacker to execute arbitrary code within the browser's sandbox an isolated security environment. An attacker could exploit this vulnerability by convincing a user to view a special...

CVE-2026-111755 vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, kubeflow-pipelines, nextcloud-server, langfuse, code-server, configurable-http-proxy, lerna...

GHSA-8R9P-F939-6H3C vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, kubeflow-pipelines, nextcloud-server, langfuse, code-server, configurable-http-proxy, lerna...

GHSA-Q3JH-WRC6-JGQ8 vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, kubeflow-pipelines, nextcloud-server, langfuse, code-server, configurable-http-proxy, lerna...

CVE-2026-111756 vulnerabilities

Vulnerabilities for packages: prism, opensearch-dashboards, kubeflow-pipelines, nextcloud-server, langfuse, code-server, configurable-http-proxy, lerna...

Exploit for CVE-2021-34527

CVE-2021-34527 PrintNightmare NAME: OLADOSU ISAAC HONOUR MATR...

php2shell-POC

CVE-2026-109618 - "PHP2Shell" proof of concept Remote code ex...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

kernel: ALSA: seq: close a re-opened queue timer in the destructor

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...

kernel: xfs: bounds-check buffer log item's dirty bitmap

A flaw was found in the Linux kernel's XFS filesystem. A local attacker, by mounting a specially crafted XFS image, could trigger an out-of-bounds write during log recovery. This vulnerability allows for kernel heap corruption, which could lead to a denial of service or potentially arbitrary code...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...