CVE-2026-2005_lab

CVE-2026-2005 — PostgreSQL pgcrypto Heap Overflow Lab A self-contained Docker lab for practicing exploitation of CVE-2026-2005, a heap buffer overflow in PostgreSQL's pgcrypto extension that enables remote code execution without superuser privileges. Affected versions: PostgreSQL ≤ 17.7 / 16.11 /...

CVE-2025-55182-poc

CVE-2025-55182-poc A proof-of-concept PoC exploit for CVE-2025-55182 , targeting an unauthenticated Remote Code Execution RCE vulnerability in Next.js Server Actions. This exploit abuses prototype pollution during the deserialization of React Server Components RSC multipart payloads to inject...

ghes-cve-scanner

GHES CVE Scanner Detects whether GitHub Enterprise Server GHES instances are affected by CVE-2026-3854 and CVE-2026-4821. CVE Background CVE-2026-3854 CVSS 8.7 Git Push RCE — The babeld component does not sanitize semicolons in git push options, allowing remote code execution. Affected versions:...

CVE-2026-33017-Lab

CVE-2026-33017 — Langflow Unauthenticated RCE Lab Executive Summary CVE-2026-33017 is an Unauthenticated Remote Code Execution RCE vulnerability in Langflow where a public build endpoint accepts attacker-controlled flow data, allowing custom component code to be executed on the server. In this la...

CVE-2026-39987_exploit

🔥 CVE-2026-39987 | Marimo Pre-Auth RCE Exploit Exploitation Framework | Full Remote Code Execution RCE | WebSocket Auth Bypass 🧠 To know the commands more Open the file website.html 🎯 Overview This exploit targets Marimo applications running WebSocket on port 2718 default. The vulnerability allow...

CVE-2026-73570

CVE-2026-73570 — Zimbra ZCS SNMP Notification RCE exploit PoC Unauthenticated Remote Code Execution via OS Command Injection in the Zimbra Collaboration Suite SNMP notification handler. Overview Field| Value ---|--- CVE| CVE-2026-73570 CVSS 3.1| 8.9 HIGH — AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L CWE|...

CVE-2026-113162

A flaw was found in chromium-browser. Due to improper input validation in the Actor component, a remote attacker can potentially execute arbitrary code within the browser's restricted sandbox environment by convincing a user to view a specially crafted HTML page...

CVE-2026-113153

A flaw was found in chromium-browser. A memory corruption vulnerability exists in the SiteIsolation component. A remote attacker can exploit this flaw by convincing a user to visit a specially crafted HTML page, potentially leading to arbitrary code execution within the browser's sandbox...

CVE-2026-113138

A flaw was found in chromium-browser. This vulnerability is caused by a memory corruption issue within the WebAppInstalls component. A remote attacker could exploit this flaw by enticing a user to visit a specially crafted HTML page, potentially allowing the execution of arbitrary code outside th...

CVE-2026-113154

A flaw was found in Chromium. This vulnerability allows a remote attacker to potentially execute arbitrary code within the browser sandbox via memory corruption in the Canvas component. To exploit this flaw, an attacker must entice a user to visit a specially crafted HTML page...

CVE-2026-113149

A flaw was found in the FullScreen component of Chromium. A remote attacker could exploit this memory corruption vulnerability by enticing a user to view a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the confines of the browser sandbox...

CVE-2026-113147

A flaw was found in the WebShare component of Chromium. Improper input validation allows a remote attacker to execute arbitrary code within the restricted browser sandbox by convincing a user to visit a crafted HTML page...

CVE-2026-113136

A flaw was found in chromium-browser. A memory corruption issue in the DevTools component allows a remote attacker to achieve arbitrary code execution within the browser's isolated sandbox. To exploit this vulnerability, an attacker must convince a user to open a specially crafted HTML page...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

CVE-2026-113135

A flaw was found in the Picture-in-Picture component of Google Chrome. This memory corruption vulnerability allows a remote attacker to potentially execute arbitrary code inside the sandbox an isolated security environment by convincing a user to visit a crafted HTML page...

CVE-2026-113127

A flaw was found in chromium-browser. This memory corruption vulnerability allows a remote attacker to achieve arbitrary code execution within the browser's restricted sandbox environment. Exploitation requires an attacker to convince a user to visit a specially crafted HTML Hypertext Markup...

CVE-2026-113126

A flaw was found in chromium-browser. A memory corruption issue in the PolicyContainer component allows a remote attacker to execute arbitrary code outside the browser's restricted sandbox environment. To exploit this vulnerability, an attacker must convince a user to open a specially crafted HTM...

CVE-2026-113124

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code within the browser sandbox by convincing a user to visit a crafted web page. The issue is caused by memory corruption in the DataTransfer component...

CVE-2026-113121

A flaw was found in the ContextMenu component of Chromium on Android. This memory corruption vulnerability allows a remote attacker to execute arbitrary code within the browser's restricted environment sandbox. To exploit the flaw, the attacker must persuade a user to visit a specially crafted HT...

CVE-2026-113120

A flaw was found in Chromium's Media component. Improper input validation allows a remote attacker to potentially execute arbitrary code inside the browser's restricted sandbox environment by enticing a user to visit a specially crafted HTML page...