CVE-2022-20607

CVE-2022-20607 Dans le firmware cellulaire Pixel, une écriture hors limites est possible en raison d'une vérification des limites manquante. Cela pourrait conduire à une exécution de code à distance nécessitant une authentification LTE. L'interaction de l'utilisateur n'est pas nécessaire pour...

CVE-2024-4577

CVE-2024-4577 root@kitploit: usage: CVE-2024-4577.py -h -v RHOST RPORT URL COMMAND PHP CGI CVE-2024-4577 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-4577 positional arguments: RHOST remote host RPORT remote port URL target address COMMAND command to execute e.g. optional arguments:...

Dropbear_CVE-2013-4434

DropbearCVE-2013-4434 dropbearCVE-2013-4434.sh Ce script vérifie CVE-2013-4434 https://vulners.com/cve/CVE-2013-4434. Le serveur SSH Dropbear antérieur à 2013.59 génère des messages d'erreur pour une tentative de connexion échouée avec des délais différents selon que le compte utilisateur existe ...

ExploitScript-CVE-2023-46604

ExploitScript-CVE-2023-466064 إخلاء مسؤولية يحتوي هذا المستودع على كود إثبات المفهوم لثغرة CVE-2023-466064 وهو مخصص لأغراض تعليمية فقط. لا يؤيد المؤلفون أو المساهمون أي نشاط غير قانوني. المعلومات الواردة هنا لأغراض أكاديمية وبحوث أمنية واختبارية، ولحل جهاز Broker الحالي من HackTheBox. باستخدامك...

CVE-2026-41089

CVE-2026-41089 root@kitploit: ██████╗██╗ ██╗███████╗ ██╗ ██╗ ██╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ██║ ██║███║██╔═████╗██╔═████╗ ██║ ██║ ██║█████╗ ███████║╚██║██║██╔██║██║██╔██║ ██║ ╚██╗ ██╔╝██╔══╝ ██╔══██║ ██║████╔╝██║████╔╝██║ ╚██████╗ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝╚██████╔╝ ╚═════...

CVE-2024-44542

CVE-2024-44542 Description: il a été découvert que todesk v1.1 contient une vulnérabilité d'injection SQL via le paramètre title sur /todesk.com/news.html. Type de vulnérabilité: Injection SQL Fournisseur du produit: todesk Version du produit concerné: todesk - v1.1 Composant affecté: todesk.com,...

CVE-2021-44228

مثال CVE-2021-44228 مثال لبناء حاوية تحتوي على الثغرة CVE-2021-44228. لا تستخدمه لأي غرض سوى اختبارات الأمان الخاضعة لرقابة مشددة. يحتوي هذا المستودع على تطبيق نموذجي يستخدم عمدًا اعتمادًا يحمل ثغرة تنفيذ تعليمات برمجية عن بُعد خطيرة. حتى في بيئة خاضعة للرقابة، يجب ألا تعرض هذا البرنامج على الشبك...

w3-total-cache-cve-2013-2010

w3-total-cache-cve-2013-2010 تنفيذ كود عن بُعد على w3 total cache cve 2013-2010 الاستخدام: python3 w3tcrceexploit.py -u http://example.com -p "system'whoami';" الإخراج: Targeting: http://example.com + Payload sent successfully. + Check the target for execution of the payload. import requests impo...

CVE-2025-46203

Description Unifiedtransform v2.0 est vulnérable à un contrôle d'accès incorrect. Tout utilisateur étudiants et enseignants peut accéder et modifier les dossiers des étudiants via les endpoints /students/edit/id. Cette fonctionnalité est destinée exclusivement à un usage administratif...

CVE-2026-84356

UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84356

UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84356

CVE-2026-84356 is a UI misrepresentation flaw in the FullScreen component of Google Chrome prior to version 152.0.7977.75 . A remote attacker could deliver a crafted HTML page that spoofs the address bar , allowing the victim to be tricked into believing they are on a different site. Chromium rat...

CVE-2026-84348

CVE-2026-84348 is an information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 (Linux) and 152.0.7977.75/.76 (Windows/Mac). A remote attacker can potentially leak sensitive information via a crafted HTML page . Chromium rates this as Medium severity; CVSS 3.1 base score is 6.5 (AV:...

CVE-2026-84348

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84348

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84332

Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84332

Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84330

CVE-2026-84330 is a UI misrepresentation vulnerability in Google Chrome on Android prior to version 152.0.7977.75 , affecting the FullScreen component. A remote attacker can spoof the address bar via a crafted HTML page, requiring user interaction. The CVSS 3.1 score is 5.4 (Medium) with a vector...

CVE-2026-84333

Use after free in Dawn in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...