CVE-2022-31144

CVE-2022-31144 CVE-2022-31144 dos redis. Rce not finished yet...

CVE-2026-34159

CVE-2026-34159 0 Click RCE exploit for CVE-2026-34159 Lama.cpp RPC server version b8487 exploit was developed by Hassan Ali @Casp3r0x0 you can find the full write up at https://www.pwntricks.com/ZeroClick-RCE-CVE-2026-34159-llama.cpp...

CVE-2023-27350

CVE-2023-27350 POC for CVE-2023-27350 affecting PaperCut MF/NG Affected Versions 'PaperCut MF or NG version 8.0 or later excluding patched versions on all OS platforms.' Summary This POC uses an authentication bypass vulnerability chained with abuse of builtin scripting functionality to execute...

CVE-2010-1872-BlazeDVD-SEH-Exploit

BlazeDVD 5.0 - '.PLF' Playlist SEH Buffer Overflow Exploit CVE-2010-1872 Proof-of-Concept PoC exploit targeting a buffer overflow vulnerability in BlazeDVD version 5.0 via a crafted .plf playlist file. The exploit uses SEH Structured Exception Handler overwrite to achieve code execution. Details...

CVE-2025-24893-XWiki-unauthenticated-RCE-via-SolrSearch

CVE-2025-24893 – Unauthenticated Remote Code Execution in XWiki 0 Table of Contents 1. Summary 2. Vulnerability Details 3. Affected Versions 4. Proof-of-Concept 4.1 Building the payload 4.2 Manual exploitation 4.3 Automated python exploit 5. Mitigation 6. Credits & References 1 Summary CVE:...

CVE-2022-31691

CVE-2022-31691 A write-up of my so far inconclusive look into CVE-2022-31691. Background I'm a frequent user of the Spring Tool Suite STS for Eclipse, and tend to rely on it to initialise new Spring Boot projects. This vulnerability see https://tanzu.vmware.com/security/cve-2022-31691 is an RCE...

vulnerability_struts-2.3.31

vulnerabilitystruts-2.3.31 Build the struts-2.3.31 CVE-2017-5638 environment. https request is possible. environment Ubuntu 20.04 Docker 20.10.12 curl 7.68.0 Server Startup We will use the tomcat:7.0-jre8 docker image. Unzip struts-2.3.31.zip in a directory of your choice. cd struts-2.3.31 sudo...

Log4shell

Igloo Corporation Won Chi-hyun Log4shell Analysis Report Log4shell CVE-2021-44228 Log4j is a free and open-source Java-based logging utility by the Apache Software Foundation, capable of logging various Java-based services. It uses JNDI Lookup to reference data and objects discovered via JNDI,...

CVE-2026-118338

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a Use after free flaw in the Animation component. A remote attacker could exploit this by providing a crafted HTML page to potentially achieve arbitrary code execution inside the sandbox. No specific exploit details or direct mitigat...

CVE-2026-118338

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118338

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118309

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118356

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118309

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118312

Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118315

Google Chrome versions prior to 156.0.8078.73 are vulnerable to a high-severity security issue caused by improper input validation in SVG . A remote attacker could exploit this by using a crafted HTML page to potentially execute arbitrary code inside the sandbox. The vulnerability impacts confide...

CVE-2026-118315

Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118315

Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-118312

Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-118356

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...