CVE-2026-110921

Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110920

Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110918

A memory corruption vulnerability exists in the Core component of Google Chrome prior to version 155.0.8059.84 . A remote attacker can exploit this flaw by having a user visit a crafted HTML page , potentially allowing the attacker to read memory . This issue was addressed in the stable channel u...

CVE-2026-110913

Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110919

Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110913

Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110919

Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110913

Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110922

A Use after free vulnerability exists in the Prerender component of Google Chrome prior to version 155.0.8059.84 . This flaw allows a remote attacker to achieve arbitrary code execution within the browser's sandbox environment by tricking a user into visiting a specially crafted HTML page. Remedi...

CVE-2026-110913

Google Chrome versions prior to 155.0.8059.84 are vulnerable to a memory corruption issue within the DOM component (CWE-119). This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by viewing a crafted HTML page . The impact is significant enough to be classified...

CVE-2026-110922

Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-110919

Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-110922

Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-110919

A Use after free flaw exists in the V8 component of the Google Chrome browser (prior to version 155.0.8059.84). This vulnerability allows a remote attacker to execute arbitrary code inside the sandbox by leveraging a crafted HTML page. The issue has been addressed in the Stable channel update to ...

CVE-2026-110922

Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Critical...

deadend

Deadend Lightweight scriptable honeypot runner that loads Lua scripts from a directory, compiles them into memory, listens with one TCP listener per script, and executes service emulation when a port is triggered. The idea is to confuse the red team or malicious agents during server observation a...

CVE-2025-34037

CVE-2025-34037 Python port of the Linksys tmUnblock.cgi RCE exploit For educational use only. Run against your own devices. Vulnerability The tmUnblock.cgi endpoint on several Linksys router models accept POST requests without validating the Authorization header. the ttcpip parameter is passed...

POC-Bash-CVE-2021-3560

Bash-CVE-2021-3560 POC Bash -- CVE-2021-3560 Polkit Local Privilege Escalation Exploit This repository provides a bash exploit for CVE-2021-3560, a local privilege escalation vulnerability in polkit affecting many modern Linux distributions. !!!!!! Under test may cause instability !!!!! 💥...

CVE-2026-36355

CVE-2026-36355: Realtek rtl819x Jungle SDK - Unauthenticated Kernel Memory Read/Write via Debug ioctls CVE : CVE-2026-36355 CWE : CWE-782, CWE-787, CWE-200 Discoverer : Daniil Gordeev Disclosed : 2026-05-03 Summary The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x out-of-tree "Jungle SDK"...

CVE-2025-24813-POC

CVE-2025-24813 Proof-of-Concept Standalone This repository contains a non-destructive, standalone PoC for CVE-2025-24813, a vulnerability in Apache Tomcat 9.0.55 allowing remote file upload via partial PUT requests. This exploit demonstrates code execution by uploading and accessing a benign JSP...