CVE-2022-26134

CVE-2022-26134 - OGNL injection vulnerability. Script proof of concept that exploits the remote code execution vulnerability affecting Atlassian Confluence 7.18 and lower products. The OGNL injection vulnerability allows an unauthenticated user to execute arbitrary code on a Confluence Server or...

CVE-2026-39987_exploit

🔥 CVE-2026-39987 | Marimo Pre-Auth RCE Exploit Exploitation Framework | Full Remote Code Execution RCE | WebSocket Auth Bypass 🧠 To know the commands more Open the file website.html 🎯 Overview This exploit targets Marimo applications running WebSocket on port 2718 default. The vulnerability allow...

CVE-2021-41773

CVE-2021-41773 Apache2 2.4.49 - LFI & RCE Exploit Info Exploit Title: Apache HTTP Server 2.4.49 - Path Traversal & Remote Code Execution RCE Exploit Author: Gaurav Raj https://gauravraj.xyz https://blog.gauravraj.xyz Vendor Homepage: https://apache.org/ Version: 2.4.49 Tested on: 2.4.49 CVE :...

kernel: ALSA: seq: close a re-opened queue timer in the destructor

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture sequencer component. An unprivileged local user with access to the sound device can exploit a timing window during the cleanup of a queue timer. This allows the user to re-open a timer that has already been closed,...

kernel: xfs: bounds-check buffer log item's dirty bitmap

A flaw was found in the Linux kernel's XFS filesystem. A local attacker, by mounting a specially crafted XFS image, could trigger an out-of-bounds write during log recovery. This vulnerability allows for kernel heap corruption, which could lead to a denial of service or potentially arbitrary code...

RpcProxyInvoke

RpcProxyInvoke Overview To create a general way to execute local and remote code, we designed a relatively obscure method of code execution, which we internally refer to as RpcCraft Self and RpcExec Remote Process. This technique leverages a methodology well-known among exploit developers, abusin...

CVE-2026-73570

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview Field| Value ---|--- CVE| CVE-2026-73570 CVSS 3.1| 8.9 HIGH — AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L CWE|...

CiscoRV320Dump

CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Exploits For Dumping Cisco RV320 Configurations and getting RCE Implementations of the CVE-2019-1652 and CVE-2019-1653 exploits disclosed by Red Team Pentesting GmbH. I only tested these on an RV320, but according to the Cisco advisory, the RV325 is also...

CVE-2026-113164

A flaw was found in the Voice component of Google Chrome. A remote attacker can execute arbitrary code inside the browser's sandbox an isolated security environment by enticing a user to visit a specially crafted HTML page. This vulnerability is caused by a memory corruption flaw within the...

CVE-2026-113162

A flaw was found in chromium-browser. Due to improper input validation in the Actor component, a remote attacker can potentially execute arbitrary code within the browser's restricted sandbox environment by convincing a user to view a specially crafted HTML page...

CVE-2026-113153

A flaw was found in chromium-browser. A memory corruption vulnerability exists in the SiteIsolation component. A remote attacker can exploit this flaw by convincing a user to visit a specially crafted HTML page, potentially leading to arbitrary code execution within the browser's sandbox...

CVE-2026-113152

A flaw was found in chromium-browser. A remote attacker could trigger a memory corruption vulnerability in the SignIn component by enticing a user to visit a crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code inside the browser sandbox...

CVE-2026-113154

A flaw was found in Chromium. This vulnerability allows a remote attacker to potentially execute arbitrary code within the browser sandbox via memory corruption in the Canvas component. To exploit this flaw, an attacker must entice a user to visit a specially crafted HTML page...

CVE-2026-113150

A flaw was found in the Bindings component of Chromium. A remote attacker could exploit this vulnerability by enticing a user into visiting a specially crafted HTML page. Successful exploitation leads to memory corruption, which may allow the attacker to execute arbitrary code within the browser'...

CVE-2026-113138

A flaw was found in chromium-browser. This vulnerability is caused by a memory corruption issue within the WebAppInstalls component. A remote attacker could exploit this flaw by enticing a user to visit a specially crafted HTML page, potentially allowing the execution of arbitrary code outside th...

CVE-2026-113149

A flaw was found in the FullScreen component of Chromium. A remote attacker could exploit this memory corruption vulnerability by enticing a user to view a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the confines of the browser sandbox...

CVE-2026-113147

A flaw was found in the WebShare component of Chromium. Improper input validation allows a remote attacker to execute arbitrary code within the restricted browser sandbox by convincing a user to visit a crafted HTML page...

CVE-2026-113166

A flaw was found in chromium-browser. A remote attacker could exploit this memory corruption vulnerability in the browsing history feature by convincing a user to view a specially crafted web page. Successful exploitation allows the attacker to execute arbitrary code within the browser's restrict...

CVE-2026-113132

A flaw was found in the DevTools component of Chromium. A remote attacker could exploit this memory corruption vulnerability by enticing a user to load a specially crafted HTML page. Successful exploitation may allow an attacker to execute arbitrary code inside the browser sandbox...

CVE-2026-113148

A flaw was found in chromium-browser's Web user interface WebUI component. A remote attacker could potentially achieve arbitrary code execution within the browser's sandbox environment by tricking a user into visiting a specially crafted HTML page. This vulnerability is caused by a memory...