CVE-2026-113190

A flaw was found in chromium-browser. A use-after-free memory vulnerability in the ServiceWorker component allows a remote attacker to execute arbitrary code within the browser sandbox. An attacker could exploit this flaw by tricking a user into visiting a specially crafted HTML page...

CVE-2026-113140

An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/536445815...

CVE-2026-113275

A flaw was found in Chromium. A use-after-free memory vulnerability in an application programming interface API allows a remote attacker to execute arbitrary code within the browser sandbox. To exploit this flaw, an attacker must convince a user to load a specially crafted HTML page...

CVE-2026-113198

A flaw was found in chromium-browser. A use-after-free memory flaw exists within the Extensions subsystem, where memory is improperly accessed after it has been freed. By enticing a user to visit a specially crafted HTML page, a remote attacker could trigger this vulnerability to execute arbitrar...

CVE-2026-113075

A flaw was found in the DevTools component of Chromium. A remote attacker could execute arbitrary code inside the browser sandbox by convincing a user to visit a crafted HTML page. This vulnerability is caused by a use-after-free condition, where the application improperly references memory that...

CVE-2026-114112

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif...

CVE-2026-114094

Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named 'C:' that bypasses NTFS validation and writes files outside the worktree to achieve remote code...

CVE-2026-114059

ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated users, including read-only reader role holders, to execute Groovy code because GremlinQueryEngine.command lacks scripting authorization checks. Attackers can submit Gremlin commands to the POST...

cve-2010-4221

cve-2010-4221 This exploit was written to study some concepts, enjoy! Usage Proftpd Telnet IAC remote generic exploit Writen by: F0rb1dd3n Usage: ./proftpd-exploit Attack Types: 0 - Socket Reuse 1 - Reverse Shell 2 - Bind Shell 3 - Your own shellcode raw format Just type the target IP, PORT and t...

CVE-2026-114112

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif...

EUVD-2026-106915

Sharp before 0.35.4 bundles a vulnerable libheif dependency that allows attackers to achieve possible remote code execution on glibc-based Linux by supplying crafted images. Attackers can submit malicious AVIF/HEIF input to applications processing untrusted images with sharp, triggering libheif...

CVE-2026-114094 Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths

Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named 'C:' that bypasses NTFS validation and writes files outside the worktree to achieve remote code...

EUVD-2026-106897

Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named 'C:' that bypasses NTFS validation and writes files outside the worktree to achieve remote code...

CVE-2026-114094 Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter paths

Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named 'C:' that bypasses NTFS validation and writes files outside the worktree to achieve remote code...

CVE-2026-114094

Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named 'C:' that bypasses NTFS validation and writes files outside the worktree to achieve remote code...

CVE-2026-114094

Dulwich before 1.2.9 fails to validate DOS drive letter prefixes in Git tree path elements on Windows, allowing arbitrary file write. Attackers can craft a malicious repository with a tree entry named 'C:' that bypasses NTFS validation and writes files outside the worktree to achieve remote code...

CVE-2026-114094

Versions of Dulwich before 1.2.9 are vulnerable to an arbitrary file write on Windows due to a failure to validate DOS drive letter prefixes in Git tree path elements. An attacker can craft a malicious repository containing a tree entry named 'C:' , which bypasses NTFS validation . This allows th...

CVE-2026-114059

ArcadeDB versions before 26.10.1 are vulnerable to remote code execution (RCE) due to missing scripting authorization checks in the GremlinQueryEngine.command() function. Authenticated users, including those with read-only reader roles, can submit Groovy code via the POST /api/v1/command/{databas...

CVE-2026-114059 ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorization

ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated users, including read-only reader role holders, to execute Groovy code because GremlinQueryEngine.command lacks scripting authorization checks. Attackers can submit Gremlin commands to the POST...

CVE-2026-114059 ArcadeDB before 26.10.1 RCE via Gremlin Groovy Engine Missing Authorization

ArcadeDB before 26.10.1 contains a remote code execution vulnerability that allows authenticated users, including read-only reader role holders, to execute Groovy code because GremlinQueryEngine.command lacks scripting authorization checks. Attackers can submit Gremlin commands to the POST...