exploit-writing-for-oswe

Exploit Writing for OSWE Background What This repository contains a list of useful snippets and tips that pertain to the writing of exploit scripts in the OSWE labs and certification exam. Some examples here may go against certain coding practices, but our end goal is to write the exploit script...

CVE-2025-7340

🚨 HT Contact Form Widget = 2.2.1 - Unauthenticated Arbitrary File Upload CVE-2025-7340 CVE: CVE-2025-7340 CVSS: 9.8 Critical 📝 Description The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. plugin for WordPress is vulnerable to arbitrary file uploads due to...

React-Server-Components-Remote-Code-Execution-CVE-2025-55182-

This repository does not have a README...

CVE-2026-113259

A flaw was found in the Frames component of Chromium. A remote attacker can exploit this vulnerability by convincing a user to visit a specially crafted HTML page, triggering a use-after-free condition where memory is accessed after being released. Successful exploitation allows the attacker to...

CVE-2026-113255

A flaw was found in chromium-browser. A remote attacker could achieve arbitrary code execution within the browser's sandbox environment by convincing a user to open a specially crafted HTML page. This vulnerability is caused by a use-after-free memory error in the CustomTabs component...

CVE-2026-113227

A flaw was found in chromium-browser. This flaw allows a remote attacker to achieve arbitrary code execution within the browser sandbox due to a use-after-free issue in the Editing component, where previously released memory is improperly accessed. To exploit this vulnerability, an attacker must...

CVE-2026-113229

A flaw was found in the Loader component of chromium-browser. A remote attacker can exploit a use-after-free memory vulnerability by enticing a user to open a specially crafted HTML page. Successful exploitation allows an attacker to execute arbitrary code within the browser sandbox environment...

CVE-2026-113205

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from a use-after-free memory management error in the Variations component...

CVE-2026-113174

A flaw was found in the Extensions component of the Chromium browser. This vulnerability is caused by a use-after-free condition, which occurs when the application attempts to access memory after it has been released. A remote attacker could exploit this flaw by convincing a user to visit a...

CVE-2026-113191

A flaw was found in chromium-browser. A use-after-free vulnerability in the Internals component allows a remote attacker to execute arbitrary code inside the browser sandbox. By tricking a user into visiting a specially crafted HTML page, an attacker can trigger memory corruption to compromise th...

CVE-2026-113187

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the browser sandbox by convincing a user to view a specially crafted HTML page. The issue is caused by a use-after-free memory error within the Document Object Model DOM component...

CVE-2026-113179

A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the browser sandbox by convincing a user to open a specially crafted HTML page. This issue is caused by a use-after-free memory error in the Paint component...

CVE-2026-113123

A flaw was found in chromium-browser. A use-after-free flaw in the GPU Graphics Processing Unit component allows memory to be improperly accessed after it has been released. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, potentially...

CVE-2026-113177

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by tricking a user into visiting a specially crafted HTML page. The vulnerability is caused by a use-after-free condition in the FileSystem component, where memory is...

CVE-2026-113208

A flaw was found in the ContextualSearch component of Chromium. A remote attacker could exploit this use-after-free vulnerability by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code inside the browser sandbox...

CVE-2026-113156

A flaw was found in Google Chrome's Messages component. A remote attacker could execute arbitrary code within the browser sandbox by convincing a user to visit a specially crafted HTML page. This vulnerability is caused by a use-after-free error, where the application accesses memory that has...

CVE-2026-113160

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser sandbox by enticing a victim to visit a specially crafted HTML page. This vulnerability stems from a use-after-free condition in the Turbolev component, which occurs when the application attempts...

CVE-2026-113202

A flaw was found in the BrowserTag component of chromium-browser. A remote attacker could exploit this vulnerability to execute arbitrary code within the browser sandbox by convincing a user to open a specially crafted HTML page. This issue is caused by a use-after-free condition, where the...

CVE-2026-113114

A flaw was found in chromium-browser. The SignIn component is vulnerable to a use-after-free condition, where memory is accessed after it has been released. By enticing a user to visit a specially crafted HTML page, a remote attacker could exploit this vulnerability to execute arbitrary code with...

CVE-2026-33826

🚨 CVE-2026-33826: Windows Active Directory Remote Code Execution RCE 📌 General Overview CVE-2026-33826 is a critical Remote Code Execution RCE vulnerability affecting Active Directory Domain Services AD DS. The flaw resides in the way the AD service handles malformed authentication requests throu...