CVE-2026-73389

Unauthenticated PHP Object Injection in Kalles Addons = 1.0.6 versions...

EUVD-2026-62375

Unauthenticated Remote Code Execution RCE in JetEngine = 3.8.14 versions...

CVE-2026-66613

JetEngine plugin ≤ 3.8.14 allows unauthenticated remote code execution. CVSS 9.8 (CRITICAL). PatchStack documented it. No exploitation evidence or fixed version provided in documents. Upgrade to latest plugin version as precautionary measure. Monitor vendor announcements for official patch release.

mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026)

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and...

CVE-2026-58087

creationtimestamp| type| source ---|---|--- 2026-08-19 12:15:16+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-58087...

Exploit for Deserialization of Untrusted Data in Apache Activemq

CVE-2023-46604 – Apache ActiveMQ Remote Code Execution Ove...

Update Chrome now: Two critical vulnerabilities fixed

Chrome is rolling out an update for its desktop versions. The update includes 15 security fixes, two of which address critical buffer overflow vulnerabilities. The stable channel has been updated to 151.0.7922.169/.170 for Windows and Mac, and 151.0.7922.169 for Linux. How to update Chrome If you...

Nuclei-Template-CVE-2024-50379

Nuclei-Template-CVE-2024-50379 Beschreibung Diese Nuclei-Vorlage erkennt Apache Tomcat-Server, die anfällig für die TOCTOU-Race-Condition sind, die eine Remote Code Execution RCE ermöglicht. ⚠ Wichtiger Hinweis : Diese Vorlage darf ausschließlich zu Bildungszwecken und in kontrollierten Umgebunge...

CVE-2022-22963_Reverse-Shell-Exploit

Exploit Reverse Shell CVE-2022-22963 Questo è uno script Python che sfrutta CVE-2022-22963, una vulnerabilità di esecuzione di codice in remoto in Spring Cloud Function che consente agli attaccanti di eseguire codice arbitrario su un server vulnerabile. L'exploit utilizza l'endpoint vulnerabile...

s2-048

s2-048 Exp per s2-048, CVE-2017-9791. root@kitploit: / \ \ / / | | \ / / | | / \ / / | | | \ \ / /| | | | | | | / /| | / / | | | | \ V / | ||/ /| || | | / /, |/ / , | | | / || ||/||// //// //|| poc: root@kitploit:...

CVE-2019-5544_CVE-2020-3992

Scanner per servizi SLP CVE-2019-5544 CVE-2020-3992 Script Python che implementa il protocollo SRVLOC/SLP per scansionare i servizi OpenSLP abilitati. Può risultare utile durante la ricerca di sistemi colpiti da CVE-2019-5544, CVE-2020-3992 o CVE-2021-21974 ... Maggiori informazioni sulla...

fusionpbx_rce_vulnerability

مقدمة يحاول هذا الكود البسيط إكمال تنفيذ الثغرة المتسلسلة التي قدمها Dustin Cobb في مقال RCE Using Caller ID – Multiple Vulnerabilities In FusionPBX. RCE خطوات إعادة الإنتاج 1. اعرض شاشة المشغل الضعيفة في متصفح ويب، والموجودة في هذا المثال على الرابط...

CVE-2021-21014

PoC Limitado CVE-2021-21014 As versões 2.4.1 e anteriores, 2.4.0-p1 e anteriores e 2.3.6 e anteriores do Magento são vulneráveis a um bypass de restrição de upload de arquivos. Uma exploração bem-sucedida pode levar à execução arbitrária de código por um atacante autenticado. Versão afetada: =...

CVE-2017-7494_IT19115344

CVE-2017-7494IT19115344 Una vulnerabilità di esecuzione remota di codice è stata trovata in Samba. Un client samba autenticato malintenzionato, con accesso in scrittura alla condivisione samba, potrebbe utilizzare questa vulnerabilità per eseguire codice arbitrario come root...

CVE-2026-76034

A flaw was found in Chromium's WebGL component. A remote attacker could exploit a buffer overflow vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside the sandbox, allowing the attacker to gain control over the affected syste...

CVE-2026-76047

A flaw was found in chromium-browser. A remote attacker could exploit a type confusion vulnerability in the V8 JavaScript engine by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially compromisin...

CVE-2026-76035

A flaw was found in Media in Google Chrome. This inappropriate implementation allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a compromise of the affected syste...

Vulnerabilities found in Oracle Communications

Oracle has identified vulnerabilities in various communication modules, including Oracle Communications Cloud Native Core Network Exposure Function, Oracle Commerce Guided Search, and Oracle Communications Unified Inventory Management. These vulnerabilities include stack-based buffer overflows,...

Vulnerabilities in Oracle Fusion Middleware

Oracle has identified 262 vulnerabilities in various Oracle products, including Oracle WebLogic Server, Oracle Identity Manager, Oracle WebCenter Portal, Oracle WebCenter Content, Oracle WebCenter Sites, Oracle WebCenter Enterprise Capture, Oracle Reports Developer, Oracle Fusion Middleware, Orac...

CVE-2026-76046

A flaw was found in ANGLE, a component used in Google Chrome on Android. A remote attacker, who has already compromised the renderer process, could exploit a buffer overflow vulnerability by tricking a user into visiting a specially crafted HTML page. This could allow the attacker to execute...