CVE-2026-113031

A flaw was found in chromium-browser. A memory corruption issue in the Media component allows a remote attacker to execute arbitrary code within the application's restricted sandbox environment. To exploit this vulnerability, the attacker must convince a user to visit a specially crafted HTML pag...

CVE-2026-113027

A flaw was found in the WebFonts component of chromium-browser. A remote attacker could exploit this vulnerability to execute arbitrary code within the browser's isolated sandbox environment by convincing a user to load a specially crafted HTML page. This issue is caused by memory corruption...

CVE-2026-113023

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code outside the browser's isolated security environment sandbox by convincing a user to view a specially crafted HTML page. The issue stems from improper input validation within the Extensions...

CVE-2026-113018

A flaw was found in chromium-browser. A remote attacker can execute arbitrary code inside the browser's sandbox due to a memory corruption issue in the Input Method Editor IME, which manages text input. Exploitation requires tricking a user into viewing a specially crafted HTML page...

CVE-2026-113016

A flaw was found in chromium-browser. Improper input validation within the Extensions component allows a remote attacker to execute arbitrary code within the browser's restricted isolation environment sandbox. An attacker could exploit this vulnerability by enticing a user to view a specially...

CVE-2026-113034

A flaw was found in the FileSystem component of chromium-browser. A remote attacker could exploit this memory corruption vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code within the application sandbox...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

CVE-2026-113020

A flaw was found in chromium-browser. Due to improper input validation in the Date component, a remote attacker can execute arbitrary code outside the browser's restricted sandbox environment by convincing a user to visit a specially crafted HTML page. Successful exploitation could compromise the...

CVE-2026-113013

A flaw was found in Chromium DevTools. A remote attacker could exploit this memory corruption issue by convincing a user to open a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser sandbox...

CVE-2026-112994

A flaw was found in chromium-browser. This vulnerability is caused by memory corruption within the browser. A remote attacker could exploit this issue by convincing a user to load a crafted HTML page, potentially leading to arbitrary code execution inside the browser sandbox...

php: fatal error handling retains stale request state leading to use-after-free

A flaw was found in PHP's error handling and worker process state management. PHP contains error handling, object, and extension state that is retained by the process but points to memory owned by a single request. A fatal error can interrupt an operation or cleanup phase before that state is...

CVE-2026-1457

CVE-2026-1457: TP-Link VIGI C385 Authenticated Remote Code Execution Overview CVE-2026-1457 is an authenticated buffer overflow vulnerability in the web API of TP-Link VIGI C385 V1. This vulnerability allows authenticated attackers to perform remote code execution RCE. CVSS v4.0 Score: 8.5 High...

CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE

Microsoft Semantic Kernel BPassed to VectorStore query/filter B -- CInMemoryVectorStore evaluates filter expression unsafely C -- DUnsafe attribute resolution via class / base / subclasses D -- EAccess to init.globals containing os and builtins E -- FArbitrary code execution e.g. os.system F --...

CVE-2026-56705

CVE-2026-56705: Adminer dsn"sqlsrv:Server=$host" . $port ? ",$port" : "", $username, $password; Semicolons in server are treated as ODBC connection-attribute delimiters, so an unauthenticated attacker can append arbitrary attributes to the DSN — including TraceFile and TraceOn. The unixODBC trace...

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices

SNMPocalypse-Cisco-Bug-Lets-Hackers-Crash-or-Command-Devices CVE-2023-20352 is a critical stack overflow flaw in Cisco IOS/IOS XE's SNMP engine. With just crafted SNMP packets, remote attackers can crash systems or seize root control. All SNMP versions are vulnerable patch now or risk total...

CVE-2024-47176

CVE-2024-47176 Vulnerability Scanner for CUPS: CVE-2024-47176 Mass Scanner for CUPS Vulnerability CVE-2024-47176 is a specialized tool designed to detect the presence of the CVE-2024-47176 vulnerability across multiple systems running the Common Unix Printing System CUPS. This vulnerability, whic...

SCAT

SCAT HP SiteScope Credential Acquisition Tool What is this? A tool that abuses a remote code execution vulnerability in default HP SiteScope v11.32 et al installations to steal credentials stored in SiteScope. What remote code execution vulnerability? HP SiteScope by default enables Java Manageme...

php2shell-poc

PHP2Shell 🔬 Two PHP vulnerabilities. One evidence trail...

CVE-2026-113005

A flaw was found in chromium-browser. A memory corruption vulnerability in the Bluetooth component allows a remote attacker to execute arbitrary code within the browser's restricted sandbox environment. To exploit this flaw, an attacker must entice a user into visiting a specially crafted HTML pa...

CVE-2026-113012

A flaw was found in chromium-browser. Improper input validation within the Graphics Processing Unit GPU component allows a remote attacker to potentially execute arbitrary code inside the browser's sandbox. An attacker could exploit this vulnerability by convincing a user to load a specially...