174310 matches found
CVE-2017-8809_MediaWiki_RFD
CVE-2017-8809 - RFDReflected File Download for MediaWiki A remote user can create a specially crafted URL for the target site that, when loaded by the target user, will cause the 'api.php' script to download a file containing shell commands CVE-2017-8809. The file will be served by the target sit...
CVE-2024-22393
Exploit CVE-2024-22393 To exploit this vulnerability, upload the photo I provided in any photo upload section. lottapixel.jpg References: https://nvd.nist.gov/vuln/detail/CVE-2024-22393 https://www.openwall.com/lists/oss-security/2024/02/22/1...
CVE-2015-3073
CVE-2015-3073 This vulnerability allows remote attackers to bypass API restrictions on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...
CVE-2019-12735-VIM-NEOVIM
CVE-2019-12735-VIM-NEOVIM USAGE: Prerequisite: modeline feature must be enabled. For regular users, modeline is enabled by default, while for root users it is disabled by default. Use echo &modeline to check the status: 1 means enabled, 0 means disabled. If not, you can add set modeline to /.vimr...
CVE-2024-4367-hands-on
!IMPORTANT This repository is for learning about vulnerabilities. This hands-on must be performed on a computer you properly manage. Do not engage in any illegal activities. The author assumes no responsibility for any damages or liabilities arising from this repository. CVE-2024-4367-hands-on...
CVE-2026-106232
An ui misrepresentation flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/522299740...
CVE-2026-106243
An incomplete cleanup flaw was found in the Proxy Auth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533426590...
PT-2026-107423
This vulnerability in Veeam Backup Enterprise Manager allows an attacker to execute script in the browser of a portal user who opens a crafted link...
Linux Distros Unpatched Vulnerability : CVE-2026-106337
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromiu...
Linux Distros Unpatched Vulnerability : CVE-2026-106305
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page...
Linux Distros Unpatched Vulnerability : CVE-2026-106348
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-106342
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium...
Wireshark 1.10.x < 1.10.12 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 1.10.12. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.12 advisory. - Buffer underflow in the ssldecryptrecord function in epan/dissectors/packet-ssl-utils.c in Wireshark 1.10.x...
Linux Distros Unpatched Vulnerability : CVE-2026-106336
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-106242
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive...
Linux Distros Unpatched Vulnerability : CVE-2026-106420
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements...
Linux Distros Unpatched Vulnerability : CVE-2026-106409
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in WebAppInstalls in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer...
Linux Distros Unpatched Vulnerability : CVE-2026-106321
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a...
Linux Distros Unpatched Vulnerability : CVE-2026-106415
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Enterprise in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-106182
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security...