CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686-문을-여는-TCP-IP-결함 Windows TCP/IP 스택의 치명적인 RCE 취약점CVE-2025-26686이 민감한 메모리 잠금 해제를 방치하여 원격 공격자가 시스템을 탈취할 수 있습니다. 네트워크를 통해 악용 가능하며, 완전한 장악 위험이 있습니다. 지금 패치하세요. 작성자: Mark Mallia 유형: 원격 코드 실행 RCE 심각도: 심각 공격 벡터: 네트워크 기반 영향을 받는 시스템: Windows 10, 11 및 Server 에디션 요약 Microsoft TCP/IP 스택에서...

go-get-rce

이 저장소에는 README가 없습니다...

cve-2021-41773

Apache httpd RCE Apache HTTP Server 2.4.49의 경로 정규화 변경 사항에서 결함이 발견되었습니다. 공격자는 경로 탐색 공격을 사용하여 Alias와 같은 지시문에 의해 구성된 디렉터리 외부의 파일에 URL을 매핑할 수 있습니다. 이러한 디렉터리 외부의 파일이 기본 구성 "require all denied"로 보호되지 않는 경우 요청이 성공할 수 있습니다. 또한 이러한 별칭 경로에 CGI 스크립트가 활성화되어 있으면 원격 코드 실행이 가능할 수 있습니다. 이 문제는 실제 환경에서 악용되고 있는 것으로...

LayarKacaSiber-CVE-2021-41773

CVE-2021-41773 - Apache HTTP Server 2.4.49 CVE-2021-41773-Path Traversal 랩 실행 방법 1. PC/노트북에 Docker를 설치하고 실행하세요 2. 이 GitHub 저장소를 클론하세요 3. Path Traversal 폴더로 이동하세요 4. 다음 명령어를 입력하세요 docker build -t cve-2021-41773-path-traversal . 그리고 docker run --rm -dit -p 8888:80 cve-2021-41773-path-traversal 5...

CVE-2026-25212

CVE-2026-25212 – Percona PMM RCE PoC 심각 – CVSS 9.9 – PMM 3.7에서 인증된 원격 코드 실행 설명 이 개념 증명PoC은 PMM 내부 PostgreSQL 사용자가 'SUPERUSER' 권한을 유지하는 취약점을 이용합니다. 인증된 공격자'pmm-admin' 권한 보유는 '데이터 소스 추가' 기능을 남용하여 PostgreSQL의 'COPY ... TO PROGRAM'을 통해 임의의 OS 명령을 실행할 수 있습니다. 영향을 받는 버전: PMM 3.7 수정된 버전: PMM 3.7 이후 요구 사...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95299): chromium -- security fixes

Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95345): chromium -- security fixes

Use after free in Actor in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95354): chromium -- security fixes

Use after free in Verifier in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: Medium...

CVE-2026-39117

An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.php...

PT-2026-102835

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description A buffer overflow exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by the browser. This flaw allows a remote attacker to execute arbitrary code...

PT-2026-102859

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 154.0.8037.92 Description Incorrect authorization in the WebView component allows a remote attacker who has already compromised the renderer process to potentially execute arbitrary code outside the...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95357): chromium -- security fixes

Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95284): chromium -- security fixes

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

PT-2026-102842

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description A use after free issue exists in the FullScreen component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

PT-2026-102832

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description A type confusion issue exists in V8, the open-source JavaScript and WebAssembly engine. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the...

PT-2026-102863

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 154.0.8037.92 Description A buffer overflow exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms. This flaw allows a remote attacker to potentially execute...

CVE-2026-39117

An issue in AltumCode 66Uptime before v.54.0.0 and 66Uptime ping-servers plugin before v.2.0.0 allows a remote attacker to execute arbitrary code via the index.php...

CVE-2024-31026

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95369): chromium -- security fixes

Inappropriate implementation in XML in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95310): chromium -- security fixes

Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...