CVE-2026-57200

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 22.8-cert3, an authenticated attacker with read-only permissions for the Asterisk REST Interface ARI may, under certain conditions, execute write...

Exploit for CVE-2026-111497

Node2Shell / Broccoli2Shell CVE-2026-111497 – Enterprise Ven...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

💀 PHP2shell One-click weaponized PoC for CVE-2026-109618 & CVE-...

CVE-2026-86389

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high...

CVE-2026-86389

Dell PowerProtect Data Domain contains an Integer Overflow or Wraparound vulnerability (CWE-190) in Feature Release versions 7.7.1.0 through 8.8 , LTS2024 versions 7.13.1.0 through 7.13.1.80 , LTS2025 versions 8.3.1.0 through 8.3.1.40 , and LTS2026 versions 8.6.1.0 through 8.6.1.20 . A high privi...

EUVD-2026-111850

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high...

CVE-2026-86389

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Integer Overflow or Wraparound vulnerability. A high...

Drupal-cve-2019-6340

Research CVE 2019-6340 The site as Drupal 8 core RESTful API Services module gets enabled and allows the user to send GET, PATCH or POST Request to the server. GET request is enough to trigger the code execution vulnerability even though PATCH method is disabled The site has any other web service...

chromium-browser: angle: ANGLE: Arbitrary code execution via type confusion in crafted HTML

A flaw was found in ANGLE, a component used in Google Chrome. This type confusion vulnerability allows a remote attacker to potentially execute arbitrary code outside of the browser's security sandbox. Exploitation can occur by enticing a user to visit a specially crafted HTML page, leading to a...

chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via improper input validation

A flaw was found in ANGLE, a component of Google Chrome. Improper input validation could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox by enticing a user to visit a specially crafted HTML page. This could lead to a complete compromise of the affected...

chromium-browser: angle: ANGLE: Arbitrary code execution via a crafted HTML page

A flaw was found in ANGLE, a graphics abstraction layer used in Chromium-based browsers. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside...

chromium-browser: angle: ANGLE: Remote code execution via crafted HTML page

A flaw was found in ANGLE, a component used in Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security...

chromium-browser: angle: Chromium: Remote code execution via out-of-bounds write in ANGLE

A flaw was found in ANGLE, a component of Chromium. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution outside of the sandbox, allowing the attacker to gain control over the...

chromium-browser: ANGLE: angle: ANGLE: Arbitrary Code Execution via Crafted HTML Page

A flaw was found in ANGLE, a component used in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. The exploitation occurs when a user visits a specially crafted HTML page, leading to a severe...

ANGLE: chromium-browser: angle: ANGLE: Arbitrary code execution via use-after-free vulnerability

A flaw was found in ANGLE, a component used in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox by tricking a user into visiting a specially crafted HTML page. This could lead to a complete compromise of the affected system...

chromium-browser: angle: Chromium ANGLE: Arbitrary code execution via crafted HTML page

A flaw was found in the ANGLE component of Google Chrome. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...

chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page

A flaw was found in ANGLE, a component of Google Chrome on Android. This 'use after free' vulnerability allows a remote attacker to execute arbitrary code outside the browser's security sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page. Successful exploitati...

chromium-browser: angle: ANGLE: Arbitrary code execution via use after free

A flaw was found in ANGLE, a component of Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the browser's security sandbox. The attacker could exploit this by enticing a user to visit a specially crafted HTML page...

CVE-2021-41773

CVE-2021-41773 Usage docker-compose up -d --build vuln-server-no-cgid python no-cgid/exploit.py docker-compose up -d --build vuln-server-cgid-sh python cgid-sh/exploit.py What is CVE-2021-41773? CVE-2021-41773 Directory traversal vulnerability in Apache HTTP Server 2.4.49. Occurs when Require all...

Remote Code Execution (RCE)

MLflow is vulnerable to remote code execution RCE. The vulnerability is due to insufficient restriction of allowed Python modules, which allows an attacker to upload a malicious module into a writable allowed package and execute arbitrary code through the scorer invocation endpoint...