CVE-2022-24112

CVE-2022-24112 CVE-2022-24112 : RCE Apache APISIX via apisix/batch-requests modèle nuclei : CVE-2022-24112.yaml Cette vulnérabilité est, dans son principe, similaire à CVE-2021-45232 : il s'agit de contourner l'authentification ou d'exploiter l'absence d'authentification pour exécuter des command...

SUSE CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

SUSE CVE-2026-84326

Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-84334

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

SUSE CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-84349

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

SUSE CVE-2026-84351

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-84352

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

SUSE CVE-2026-84354

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-29053

Это переработка репозитория от rootxran для этой же CVE - https://github.com/rootxran/CVE-2026-29053 Во время тестирования в определённых средах Ghost CMS исходная тема-пейлоад вызывала фатальную ошибку Handlebars. CMS не смогла активировать вредоносную тему, потому что в файле author.hbs...

CVE-2026-19219

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

Two critical Chrome flaws put users at risk on malicious websites

Chrome is rolling out an update for its desktop browser. The update includes 26 security fixes, two of which Google rates as critical use-after-free vulnerabilities. The Stable channel has been updated to 152.0.7977.75/.76 for Windows and Mac, and 152.0.7977.75 for Linux. How to update Chrome If...

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration WordPress용 WPvivid Backup & Migration 플러그인마이그레이션, 백업, 스테이징은 버전 0.9.123 이하에서 인증되지 않은 임의 파일 업로드Unauthenticated Arbitrary File Upload 취약점에 노출되어 있습니다. 이는 RSA 복호화 과정의 부적절한 오류 처리와 업로드된 파일 작성 시 경로 검증path sanitization 부재가 결합되어 발생합니다. 플러그인이...

CVE-2026-10170-RCE

Visitor Management System 1.0 — SQLi до удалённого выполнения кода цепочка атак Информация об уязвимости...

ghostlock-vagrant-box

Banc d'essai de chaîne de vulnérabilité complète : Nginx RCE → GhostLock LPE Vue d'ensemble Ce dépôt fournit un environnement Vagrant conçu pour démontrer une chaîne d'exploitation complète en deux étapes. Le banc d'essai provisionne automatiquement une machine virtuelle Ubuntu 22.04 LTS isolée,...

cve-2025-43564-tomcat_put_rce_reproduction

CVE-2025-43564 — Удаленное выполнение кода при обработке частичных PUT-запросов в Apache Tomcat...

CVE-2023-22496-PoC

CVE-2023-22496 — Netdata Agent OS Command Injection PoC 심각도 : 치명적 CVSS 9.8 영향받는 버전 : Netdata Agent 수정 버전 : v1.37.0 유형 : OS Command Injection CWE-78 개요 CVE-2023-22496 은 Netdata의 health 알림 시스템에서 발생하는 OS 명령어 삽입 취약점입니다. 스트리밍 체인의 모든 노드에 있는 registryhostname이 셸 명령어에 삽입될 때 정제sanitisation되지 않습니다. Netdata ...

CVE-2026-42945

RIFT — Remote Injection & Fault Trigger Автор: Michael Sanji Winaya Prawiradibrata ИИ-соавтор: Varanus — мой друг Фреймворк эксплойта heap buffer overflow, нацеленный на ngxhttprewritemodule NGINX. Один инструмент для разведки и эксплуатации. Ноль внешних зависимостей. Содержимое репозитория Файл...