CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-84324

A use-after-free vulnerability in the Proxy component of Google Chrome (versions prior to 152.0.7977.75 ) allows a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium rates it High severity; NVD assigns a CVSS 3.1 score of 9.0 (CRITICAL) with a Chan...

CVE-2026-84324

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

CVE-2026-84349

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84354

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84352

CVE-2026-84352 is a critical use-after-free vulnerability in WebGL in Google Chrome (prior to 152.0.7977.75 on Android), allowing a remote attacker to execute arbitrary code outside the browser sandbox via a crafted HTML page. The CVSS 3.1 score is 9.6 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H). The b...

CVE-2026-84352

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-84354

Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84353

Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-84352

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-84353

Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-84353

CVE-2026-84353 is a critical use-after-free vulnerability in Shared Tab Groups of Google Chrome prior to version 152.0.7977.75 (Android/Linux) and 152.0.7977.76 (Windows/Mac). A remote attacker leveraging social engineering (e.g., luring a user to a malicious website or HTML email) can execute ar...

detect-cve-2024-4367

Detect CVE-2024-4367 Quick-and-dirty YARA detection rule for CVE-2024-4367 arbitrary javascript execution in PDF.js. Usage root@kitploit: $ yara explpdfjscve20244367.yar pocgeneralizedCVE-2024-4367.pdf EXPLPDFJSCVE20244367 pocgeneralizedCVE-2024-4367.pdf Credits POC and disclosure from...

struts2-rce

Exploit Demo for CVE-2017-5638 Completely based on https://github.com/piesecurity/apache-struts2-CVE-2017-5638 A realistic scenario where a reference project for a framework is deployed on a container but with terrible consequences. To familiarise yourself look at the code and compile it. Also...

Shell-Shock

Shell Shock Authors : [email protected] Maintainers : Department : DevOps Licenses : Overview Shell Shock : Privelege Escalation, Remote Code Execution Family of bugs in the Unix Bash Shell. Allow execution of arbitrary commands. Exploitation Vectors Payloads shellshock user agent =...

weblogic2021

This project is intended for security research and authorized use only. Users are responsible and obligated to comply with local laws and regulations. weblogic2021 CVE-2021-1994, CVE-2021-2047, CVE-2021-2064, CVE-2021-2108, CVE-2021-2075, CVE-2019-17195, CVE-2020-14756, CVE-2021-2109 7 critical...

CVE-2025-1094-Exploit

CVE-2025-1094: SQL Injection to RCE via WebSocket 🚀 This repository contains a proof of concept PoC exploit for CVE-2025-1094 , a vulnerability in PostgreSQL that allows an SQL Injection SQLi attack to escalate to Remote Code Execution RCE through WebSocket hijacking. Overview This exploit...

CVE-2022-41082

CVE-2022-41082 This repository contains a proof-of-concept PoC tool for exploiting the OWASSRF vulnerability CVE-2022-41082 in Microsoft Exchange servers. The exploit allows attackers to execute arbitrary commands on the server, potentially compromising the system. Overview The tool leverages an...

Spring4Shell-CVE-2022-22965

Spring4Shell: CVE-2022-22965 RCE Java Spring framework RCE vulnerability These vulnerabilities affects a component "Spring Core" — the heart of the framework Current conditions for vulnerability:- JDK 9+ A vulnerable version of the Spring Framework 5.2 | 5.2.0-19 | 5.3.0-17 Apache Tomcat as a...

CVE-2024-25600

CVE-2024-25600 Exploit - WordPress Bricks Builder Remote Code Execution RCE An exploit script for CVE-2024-25600 , a critical unauthenticated Remote Code Execution RCE vulnerability in the Bricks Builder plugin for WordPress. This tool detects the flaw, extracts the nonce, and provides an...