23899 matches found
CVE-2025-20281-Cisco
CVE-2025-20281 - Cisco ISE RCE Vulnerability Checker This script checks for the presence of the CVE-2025-20281 vulnerability in Cisco Identity Services Engine ISE and ISE-PIC, which allows unauthenticated remote code execution RCE as root due to insufficient input validation in a specific API. Th...
CVE-2024-34693
CVE-2024-34693: Server Arbitrary File Read in Apache Superset Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with localinfile enabled. By enabling localinfile in the Superset MySQL/MariaDB client and pointing the...
CVE-2026-119270
Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-119262
Improper input validation in V8 in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-119261
Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
zimbramail-CVE-2025-68645-poc
zimbramail-CVE-2025-68645-poc A proof-of-concept exploiting a Local File Inclusion LFI vulnerability existing in the Webmail Classic UI of Zimbra Collaboration ZCS 10.0 and 10.1 because of improper handling of user-supplied request parameters in the RestFilter servlet. Vulnerability The...
CVE-2026-118354
An improper input validation flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568936430...
CVE-2026-118348
An improper input validation flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574776938...
CVE-2026-118329
An improper input validation flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568900535...
CVE-2026-0848-PoC-Improper-Input-Validation
CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC ⚠️ WARNING This code executes arbitrary commands on your system. Use ONLY in virtual machines or isolated containers. Description Functional PoC for CVE-2026-0848. Demonstrates how a malicious JAR file can execute arbitrary code when loaded by NLTK...
CVE-2026-118343
An improper input validation flaw was found in the ReadingList component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/573389782...
CVE-2026-118336
An improper input validation flaw was found in the Headless component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572111820...
CVE-2026-118335
An improper input validation flaw was found in the Metrics component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574606539...
CVE-2026-118331
An improper input validation flaw was found in the FileAPI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/572193211...
CVE-2026-118328
An improper input validation flaw was found in the WebRTC component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570927027...
CVE-2026-118315
An improper input validation flaw was found in the SVG component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/575184164...
CVE-2026-118314
An improper input validation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574803484...
CVE-2026-118304
An improper input validation flaw was found in the SVG component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574101376...
CVE-2022-24086-RCE-PoC
CVE-2022-24086 RCE POC About CVE-2022-24086 which Adobe saw being “exploited in the wild in very limited attacks” received a severity score of 9.8 out of 10, and adversaries exploiting it can achieve remote code execution on affected systems without the need to authenticate. Issue that is now...