CVE-2026-126894

Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-126890

Out of bounds read in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-126884

Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-126871

Out of bounds read in Skia in Google Chrome on on Mac prior to 157.0.8103.78 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-126857

Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-126841

Out of bounds read in Skia in Google Chrome prior to 157.0.8103.78 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

exploit-CVE-2019-14530

OpenEMR CVE-2019-14530 exploit OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the file to be read Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...

CVE-2024-20767

CVE-2024-20767 CVE-2024-20767 - Arbitrary file system read using an Improper Access Control vulnerability in Adobe ColdFusion Please refer to ma4ter blogpost for more information: Adobe ColdFusion任意文件读取漏洞CVE-2024-20767分析 Products and Versions affected: Product| Affected Versions ---|--- ColdFusio...

CVE-2020-10977

Python Exploit for gitlab private instance arbitrary file read At the date of 03/23/2020, a vulnerability report with its PoC was released in hackerone by William Bowling With this vulnerability we can read any world readable files with permission 444 or more on the gitlab server like /etc/passwd...

CVE-2019-17662

CVE-2019-17662 Description ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file th...

drupal-openai-provider-ssrf-cve-2026-13233

Drupal OpenAI Provider — SSRF / local file read via response URL CVE-2026-13233 Untrusted upstream: the provider that fetched the URL its response told it to. Drupal OpenAI Provider aiprovideropenai · SSRF CWE-918 · CVE-2026-13233 · SA-CONTRIB-2026-053 Status: Coordinated disclosure complete...

CVE-2025-1094-Exploit

CVE-2025-1094: SQL Injection to RCE via WebSocket 🚀 This repository contains a proof of concept PoC exploit for CVE-2025-1094 , a vulnerability in PostgreSQL that allows an SQL Injection SQLi attack to escalate to Remote Code Execution RCE through WebSocket hijacking. Overview This exploit...

-INE_Shivam_Gupta_23104003

CVE-2021-43798 — Grafana Unauthenticated Path Traversal Lab Educational use only. Run this lab only on an isolated local machine. Never expose it to the internet. CVE Summary Field| Detail ---|--- CVE ID| CVE-2021-43798 Product| Grafana Affected Versions| 8.0.0 – 8.3.0 Patched Version| 8.3.1+...

CVE-2022-22063

CVE-2022-22063 CVE-2022-22063 is a security issue in the hypervisor firmware of some older Qualcomm chipsets. An unprotected hardware component the "boot remapper" can be abused to gain full read/write access to the hypervisor from a modified operating system privilege escalation. Exploiting the...

poc-yaws-dav-xxe

XXE in Yaws web server CVE-2020-24379 Proof of concept Build test image: docker build -t vulnbe/yaws-pocs:xxe-dav-mod -f Dockerfile . and/or Run container docker run --rm -d -i -p 127.0.0.1:8000:8080 vulnbe/yaws-pocs:xxe-dav-mod Then run: curl -i -s -k -X LOCK http://localhost:8000/ -H 'Timeout:...

CVE-2026-114469

Out-of-bounds read can crash git-apply1 when binary patch inflates to very large size...

CVE-2026-114466

Arbitrary data can be read or written through git-fast-import1 and git-fast-export1 features not marked unsafe...

CVE-2026-16237

PostgreSQL contains a vulnerability in the INSERT ... ON CONFLICT statement when used with auto-updatable views. Due to improper protection, an attacker with INSERT and UPDATE privileges on a view can bypass the view's WHERE condition—regardless of whether it is a security_barrier view—to read or...

CVE-2026-16237 PostgreSQL INSERT ... ON CONFLICT can read or modify rows despite auto-updatable view WHERE condition

Improper protection in PostgreSQL INSERT ... ON CONFLICT on auto-updatable views allows an attacker having INSERT and UPDATE privileges on the view to read and modify every row in the view's base table, via iterated INSERT ... ON CONFLICT DO UPDATE. This bypasses the view's WHERE condition, wheth...

EUVD-2026-124513

Buffer over-read in PostgreSQL parallel B-tree scans allows an object creator to read attacker-chosen server-memory addresses, via a function incorrectly marked PARALLEL SAFE or STABLE to make participating workers build different scan-key arrays. Within major versions 17-18, minor versions befor...