322142 matches found
CVE-2026-94453 IKEv2 Use-After-Free bug when using IKE-over-TCP
Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet retransmit or malicious is received for the same tuple. IKE state is retained in memory after the client closes the connection, storing a pointer to...
CVE-2026-94453
Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet retransmit or malicious is received for the same tuple. IKE state is retained in memory after the client closes the connection, storing a pointer to...
CVE-2026-94453
Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet retransmit or malicious is received for the same tuple. IKE state is retained in memory after the client closes the connection, storing a pointer to...
disable-RegisterSpoolerRemoteRpcEndPoint
disable-RegisterSpoolerRemoteRpcEndPoint Workaround for Windows Print Spooler Remote Code Execution VulnerabilityCVE-2021-34527. See: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-34527 Update 2021-07-08: Microsoft released a patch Microsoft already released a patch for this...
CVE-2016-3088
CVE-2016-3088 Apache ActiveMQ Remote Code Execution Exploit Description The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request. Author Alexandre Aguiar @cyberaguiar Exploit...
CVE-2026-88083
Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-67625
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
CVE-2026-49950
Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to execute arbitrary code by sending crafted data over the actor-pool TCP channel. Attackers can exploit SocketChannel.recv passing unvalidated data to cloudpickle.loads, which...
VMware-CVE-2022-22954
VMware CVE-2022-22954 Workspace ONE Access Freemarker Server-side Template Injection POC for Vmware CVE-2022-22954 Use this one line GET request!! This will execute cat /etc/passwd...
CVE-2026-110171
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110142
Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-110167
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110142
Use after free in FileSystem in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-110142
Google Chrome versions prior to 155.0.8059.79 are vulnerable to a use after free flaw in the FileSystem component. A remote attacker can exploit this vulnerability via a crafted HTML page to execute arbitrary code outside the sandbox. This issue has been addressed in version 155.0.8059.79 for Win...
CVE-2026-110171
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110167
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110167
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110167
A use after free vulnerability exists in the Media component of Google Chrome prior to version 155.0.8059.79 . A remote attacker could exploit this flaw by interacting with a crafted HTML page to achieve arbitrary code execution within the sandbox. This issue was reported by security researcher X...
CVE-2026-110155
Buffer overflow in PDFium in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110155
A buffer overflow vulnerability exists in the PDFium component of Google Chrome prior to version 155.0.8059.79 . This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . This issue has been addressed in the stable channel update and is...