CVE-2020-16012-PoC

Projet M2 - Side Channel Attack Client Chrome Version 83 Installation Link https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Linuxx64/756066/ Launch command unzip Linux...chrome.zip cd chrome-linux/ ./chrome --disable-gpu --disable-software-rasterizer...

CVE-2025-32433.py

CVE-2025-32433.py Этот PoC на Python симулирует потоки сообщений SSH, включая обмен ключами, открытие канала и запросы команд, для анализа поведения сервера. Предназначен для контролируемого лабораторного тестирования, демонстрирует обработку протокола, обработку сообщений до аутентификации и...

Estudo-de-Caso-CVE-2024-21413

CVE-2024-21413 — Moniker Link 🔗💀 Microsoft Outlook RCE + Fuite d'identifiants NTLM ⚠️ Avis juridique : Ce dépôt est exclusivement destiné à des fins éducatives et de recherche en sécurité. Toutes les démonstrations ont été réalisées dans des environnements contrôlés et isolés. L'utilisation de ces...

HoneySAP

HoneySAP: SAP Low-interaction honeypot Version 0.1.2.dev0 XXX 2022 Overview HoneySAP is a low-interaction research-focused honeypot specific for SAP services. It's aimed at learn the techniques and motivations behind attacks against SAP systems. Features low-interaction honeypot for SAP services...

CVE-2024-21689

CVE-2024–21689 RCE Bamboo Data Center et Serveur Atlassian Score CVSS - 7.6 🔥 Description Cette vulnérabilité RCE Exécution de Code à Distance de sévérité élevée, identifiée CVE-2024-21689, a été introduite dans les versions 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0 et 9.6.0 de Bamboo Data Center et...

cve-2018-12798

Vulnérabilité de dépassement de tas et d'exécution de code à distance dans Adobe Acrobat Reader Vulnérabilité Vulnérabilité de restriction inappropriée des opérations dans les limites d'un tampon mémoire Description de la vulnérabilité Cette vulnérabilité permet à des attaquants distants d'exécut...

CVE-2026-100603: Improper Control of Interaction Frequency

ClawHub openclaw/clawhub application/backend contains a flaw in the skill report moderation flow: four distinct ordinary authenticated accounts can report a visible skill and trigger automatic hiding moderationStatus: hidden of that skill from the catalog without any moderator decision. Because t...

Hitachi Pentaho Business Analytics Server - Remote Code Execution

Hitachi Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x, is susceptible to remote code execution via server-side template injection. Certain web services can set property values which contain Spring templates that are interpreted downstream, thereby...

PT-2026-99098

Name of the Vulnerable Software and Affected Versions Microsoft Office Outlook affected versions not specified Description An integer overflow or wraparound occurs in Microsoft Office Outlook, which could allow an unauthorized attacker to execute code remotely over a network. This issue requires...

SUSE CVE-2026-95298

Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

Foxit PDF Reader importIcon NTLM Response Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementati...

Foxit PDF Reader Portfolio Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Linux Distros Unpatched Vulnerability : CVE-2026-91748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Extensions in Google Chrome on on Mac prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process and leveraged...

CVE-2026-75745

Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

CVE-2026-75686

Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim...

CVE-2026-75633

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user...

CVE-2026-19480

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

EUVD-2026-84799

Premiere Pro is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation potentially resulting in unauthorized write access. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2026-81995

Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability (CWE-20) that can lead to arbitrary code execution in the context of the current user. An attacker with high privileges can exploit this issue without requiring any user interaction. The vulnerability has...

CVE-2026-75686 Adobe Connect | Improper Input Validation (CWE-20)

Adobe Connect is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim...