SUSE CVE-2026-102304

Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-102308

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-102309

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-102316

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-102323

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-102324

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-102328

Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-102331

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 Este exploit utiliza direcciones y shellcode para Citrix VPX 13.1-48.47. Para el artículo completo, haga clic aquí. Uso Se requiere NASM para compilar el shellcode. $ sudo apt install nasm El shellcode incluido descargará y ejecutará un script de shell desde un servid...

pocs

minervais.com.phpMyAdminRCE.sh phpMyAdmin '/scripts/setup.php' PHP Code Injection RCE POC. This was the first publicly-released exploit for CVE-2009-1151. Syntax $ ./phpMyAdminRCE.sh usage: ./phpMyAdminRCE.sh i.e.: ./phpMyAdminRCE.sh http://target.tld/phpMyAdmin/ Demo $ ./phpMyAdminRCE.sh...

CVE-2024-21534

CVE-2024-21534: Vulnerabilidad de Ejecución Remota de Código en jsonpath-plus =10.0.7 Resumen Este repositorio contiene un exploit de Prueba de Concepto PoC para una vulnerabilidad crítica de Ejecución Remota de Código RCE en el paquete jsonpath-plus, que afecta a versiones anteriores a la 10.0.7...

cve-2019-13132-lab

CVE-2019-13132 — desbordamiento de pila en CURVE INITIATE de libzmq → laboratorio RCE Exploit RCE funcional de extremo a extremo + laboratorio reproducible para CVE-2019-13132 , un desbordamiento de búfer de pila en el manejador del handshake CURVE INITIATE de libzmq. Un atacante que conozca la...

CVE-2026-35196

CVE-2026-35196 · Chamilo LMS · Inyección de Comandos del SO → RCE Investigador: K Tipo de Divulgación: Divulgación Responsable Estado: Parcheado Producto Afectado: Chamilo LMS 2.0 Confirmado en v1.11.32 📋 Resumen de Vulnerabilidad Campo| Detalles ---|--- Producto| Chamilo LMS Versión Afectada| 2....

CVE-2026-6009

⚠️ Descargo de responsabilidad: Este repositorio es solo para fines educativos y pruebas de seguridad autorizadas. No lo utilice en sistemas que no posea o para los que no tenga permiso explícito por escrito para realizar pruebas. CVE-2026-6009 Prueba de Concepto Resumen La biblioteca Jaspersoft...

CVE-2026-103395 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service

LightLLM through 1.2.0 visualonly deployments expose an unauthenticated RPyC service with allowpickle enabled that deserializes attacker-supplied arguments in the remoteinferimages method. Attackers can reach the visual RPyC port and pass objects with reduce methods to execute arbitrary code with...

CVE-2026-103395 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service

LightLLM through 1.2.0 visualonly deployments expose an unauthenticated RPyC service with allowpickle enabled that deserializes attacker-supplied arguments in the remoteinferimages method. Attackers can reach the visual RPyC port and pass objects with reduce methods to execute arbitrary code with...

EUVD-2026-89990

LightLLM through 1.2.0 visualonly deployments expose an unauthenticated RPyC service with allowpickle enabled that deserializes attacker-supplied arguments in the remoteinferimages method. Attackers can reach the visual RPyC port and pass objects with reduce methods to execute arbitrary code with...

CVE-2026-103395 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service

LightLLM through 1.2.0 visualonly deployments expose an unauthenticated RPyC service with allowpickle enabled that deserializes attacker-supplied arguments in the remoteinferimages method. Attackers can reach the visual RPyC port and pass objects with reduce methods to execute arbitrary code with...

CVE-2026-103395

Versions of LightLLM through 1.2.0 with visual_only deployments are vulnerable to Unauthenticated Remote Code Execution (RCE) . The issue stems from an exposed RPyC service where the allow_pickle option is enabled, allowing the remote_infer_images method to deserialize untrusted arguments. An att...

GHSA-VCVR-R3JV-PC5J Next.js: Remote Code Execution in next/og ImageResponse

Impact The Node.js ImageResponse implementation from next/og is affected by an upstream vulnerability. This can lead to remote code execution. Affected applications pass attacker-controlled values into SVG content, attributes, or styles during image generation: tsx import ImageResponse from...