Astra Linux – Vulnerability in Chromium

Using “after free” in DevTools in Google Chrome before version 151.0.7922.72 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Using “after free” in DevTools in Google Chrome before version 153.0.8010.36 allowed a remote attacker to leverage social engineering to execute arbitrary code within the sandbox through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before version 151.0.7922.72 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Using “after free” in Chromoting in Google Chrome before version 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox through crafted network traffic. Chromium security severity: Critical...

Astra Linux – Vulnerability in Chromium

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Using “after free” in Dawn in Google Chrome before version 151.0.7922.72 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of after-free in V8 in Google Chrome before version 151.0.7922.72 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...

CVE-2022-23614

CVE-2022-23614 Prueba de concepto PoC para CVE-2022-23614 referenciado en el DSA-5107-1. CVSS-2.0 : 7.5 CVSS-3.X : 9.8 Explicación Twig es un motor de plantillas flexible, rápido y seguro para PHP. Notablemente, es posible usar filtros en una plantilla antes de renderizarla. El filtro sort se pue...

CVE-2023-4636

CVE-2023-4636 La vulnerabilidad en limelight es un problema de ejecución remota de código RCE no autenticado que surge de controles insuficientes en las rutas de archivos durante el procesamiento de imágenes mediante Imagick. Permite a los adversarios proporcionar archivos a través de FTP, lo que...

CVE-2021-42756

CVE-2021-42756 Multiple stack-based buffer overflow vulnerabilities CWE-121 in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and below, 6.4 all versions may allow an unauthenticated remote attacker to achieve arbitrary code execution via...

CVE-2025-8110

CVE-2025-8110 — PoC de RCE en Gogs Silentium / HackTheBox Descargo de responsabilidad: Esta herramienta está destinada estrictamente a fines educativos y pruebas de penetración autorizadas. Úsela únicamente contra sistemas para los que tenga permiso explícito. Esta es una versión modificada de...

CVE-2025-55182-Attack-Analysis

Análisis del ataque CVE-2025-55182: RCE en React Server Components Análisis de un ataque real en una aplicación Next.js de producción 📋 Tabla de Contenidos Resumen Ejecutivo Resumen de la Vulnerabilidad Cronología del Ataque Análisis Técnico Análisis del Malware Indicadores de Compromiso IOCs...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 VMware vSphere Client Carga de archivos no autorizada para ejecución remota de código RCE El vSphere Web Client HTML5 es esencialmente una interfaz administrativa que permite la gestión de una instalación de vSphere. El vSphere Client proporciona a un administrador...

cve-2013-3900-remediation-report

Informe de Remediación: CVE-2013-3900 – Vulnerabilidad de WinVerifyTrust en Windows Server 2019 Máquina Virtual de Azure Resumen Durante una evaluación de vulnerabilidades autenticada reciente realizada con Tenable Nessus, se detectó CVE-2013-3900 en una máquina virtual con Windows Server 2019...

Microsoft-Word-CVE-2017-0199-

Microsoft-Word-CVE-2017-0199- Description: Microsoft Word CVE-2017-0199 is prone to a RCE trough a HTA Handler A remote code execution vulnerability exists in the way that Microsoft Office and WordPad parse specially crafted files. An attacker who successfully exploited this vulnerability could...

CVE-2025-55182-exploit

⚠️ DISCLAIMER This tool is for authorized security testing and educational purposes ONLY. Only test systems you own or have explicit written permission to test Unauthorized use is illegal and unethical The developers assume no liability for misuse Use responsibly and in compliance with all...

Apple-Safari-Remote-Code-Execution-CVE-2020-27930

此存储库没有 README。...

CVE-2017-9805

CVE-2017-9805: Análisis de RCE en Apache Struts 2 S2-052 Este repositorio contiene los detalles técnicos y el trabajo PoC Prueba de Concepto para la vulnerabilidad de deserialización de XStream en Apache Struts 2 S2-052. 📌 Detalles de la Vulnerabilidad CVE ID: CVE-2017-9805 Tipo de Vulnerabilidad...