DEBIAN-CVE-2026-84349

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84351

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-84334

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

DEBIAN-CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

DEBIAN-CVE-2026-84351

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84350

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Low...

DEBIAN-CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

DEBIAN-CVE-2026-84326

Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-84326

Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment Objective: Demonstrate the exploitation of the Log4Shell vulnerability CVE-2021-44228 within a simulated banking application environment. Scope: 1: Setup a vulnerable banking application using Apache Log4j. 2:Craft a payload to exploit...

CVE-2019-0887

CVE-2019-0887 Compile the CVE-2019-0887, rename to winhlp.dll Compile the InstallHook, rename to hook.exe be careful, they must be compile with x64 Put then into the evil system just like that root@kitploit: c:\windows\hook.exe c:\windows\winhlp.dll c:\windows\winhlp64.exe something evil if...

exploit-CVE-2015-1427

Elasticsearch 1.4.0 1.4.2 Remote Code Execution Elasticsearch is a distributed, RESTful search and analytics engine capable of solving a growing number of use cases. As the heart of the Elastic Stack, it centrally stores your data so you can discover the expected and uncover the unexpected...

exploit-CVE-2015-3306

ProFTPd 1.3.5 - modcopy Remote Command Execution ProFTPD is a highly configurable FTP daemon for Unix and Unix-like operating systems. ProFTPD grew from a desire for a secure and configurable FTP server. It was inspired by a significant admiration of the Apache web server. Unlike most other Unix...

cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd 7etsuo Description An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server sshd on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to...

Spring4ShellPoC

Spring4ShellPoC Spring4Shell PoC CVE-2022-22965 Just playing with the exploit. Modified from the good work done by BobTheShopLifter, https://github.com/BobTheShoplifter/Spring4Shell-POC and TryHackMe, https://tryhackme.com/room/spring4shell Just a few tweaks. Added a some extra bits when checking...

CVE-2019-12725-modified-exp

CVE-2019-12725-modified-exp Modified to fix errors and execute commands with higher priviliege, also removed the sleep13 in the original script to save time. references: https://www.modb.pro/db/120391 https://www.exploit-db.com/exploits/49862...

exploit-CVE-2016-9920

Roundcube 1.0.0 = 1.2.2 Remote Code Execution Roundcube is a widely distributed open-source webmail software used by many organizations and companies around the globe. The mirror on SourceForge, for example, counts more than 260,000 downloads in the last 12 months which is only a small fraction o...