CVE-2026-113063

A flaw was found in the Chromoting component of chromium-browser. Due to improper input validation, a remote attacker can achieve arbitrary code execution inside the browser sandbox by tricking a user into visiting a crafted HTML page. Successful exploitation allows unauthorized code to run withi...

CVE-2021-22204-exiftool

CVE-2021-22204-exiftool Python exploit for the CVE-2021-22204 vulnerability in Exiftool. About the vulnerability The CVE-2021-22204 was discovered and reported by William Bowling. @wcbowling This exploit was made by studying the exiftool patch after the CVE was already reported. Pre-requisites...

CVE-2020-11932

CVE-2020-11932 Double-Free bug in WhatsApp exploit poc. Note: Make sure to set the listner ip in exploit.c inorder to get shell nc -lvp 1337 or whatever port. and then compile. make or gcc -o exploit egiflib.c exploit.c then run ./exploit and save the content to .gif and send to victim. Source...

CVE-2026-20179

Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation GRE Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is...

CVE-2026-91334

A flaw was found in OpenJDK's ImageIO component. This vulnerability allows an unauthenticated remote attacker to cause information disclosure by submitting crafted inputs to applications or web services using the ImageIO application programming interface API. Successful exploitation can result in...

CVE-2026-20197 Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error...

CVE-2026-20197

Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine due to incomplete error checking during the parsing of Teredo packets. An unauthenticated, remote attacker could exploit this by sending a crafted Teredo packet to a targeted device, causing the Snort 3...

CVE-2026-20179

Multiple Cisco products are impacted by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection Engine . The root cause is incomplete error checking during the parsing of GRE packets. An unauthenticated, remote attacker can exploit this by sending a crafted GRE packet to a ta...

CVE-2026-20179 Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities

Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation GRE Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is...

EUVD-2026-107373

Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation GRE Detection Engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is...

tomcat-cluster-session-sync-exp

The tool is only for security research and internal self-inspection. It is prohibited to use the tool for illegal attacks. The user shall bear all consequences. tomcat cluster sync-session exploit This is an exploit targeting deserialization vulnerabilities caused by insecure configurations lack ...

PSTrojanFile

PSTrojanFile Windows PowerShell Filename and Defender Anti-Malware API - Code Execution POC Discovery: John Page aka hyp3rlinx 2019 and revisted 2023 Updated Dec 24, 2023 Bypassing single quotes obstacle in PowerShell for code exec and bonus PS Windows Event log fail! Semicolon and friend "&"...

cve-2024-4367-poc

CVE-2024-4367 POC for PDF.js POC for PDF.js' CVE-2024-4367 vuln - The pdf-modify.py script can be used to modify your PDFs and inject payloads. Usage 1. Ensure CVE-2024-4367-POC-base-placeholder.pdf is in the working directory. 2. Uncomment/modify the payloadnew variable in pdf-modify.py. 3. Run...

netbsd_hfs

NetBSD hfs local overflow Bug details: sizet hfslibreadanodeoffsetsvoid inbytes, uint16t outoffsetarray void ptr; if inbytes == NULL || outoffsetarray == NULL return 0; ptr = inbytes; / The offset for record 0 which is the very last offset in the node is always equal to 14, the size of the node...

CVE-2017-8809_MediaWiki_RFD

CVE-2017-8809 - RFDReflected File Download for MediaWiki A remote user can create a specially crafted URL for the target site that, when loaded by the target user, will cause the 'api.php' script to download a file containing shell commands CVE-2017-8809. The file will be served by the target sit...

DEBIAN-CVE-2026-113157

Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113120

Improper input validation in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113316

Improper input validation in Views in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-113230

Improper input validation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113147

Improper input validation in WebShare in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...