CVE-2026-84353

Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-84352

Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-84332

Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-84347

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84348

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-84348

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-84330

UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84326

Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Exploiting-CVE-2021-44228-Log4Shell-in-a-Banking-Environment

銀行環境におけるCVE-2021-44228-Log4Shellの悪用 目的: シミュレートされた銀行アプリケーション環境内で、Log4Shellの脆弱性（CVE-2021-44228）の悪用を実証します。 範囲: 1: Apache Log4jを使用した、脆弱性のある銀行アプリケーションをセットアップする。 2:脆弱性を悪用してリモートコード実行を達成するペイロードを作成する。 3:データ窃取や水平移動などの侵害後のテクニックを実証する。 4:パッチ適用やネットワーク監視を含む、検出および緩和策を実装して文書化する。 5:使用したツール（例：JNDI Exploit Kit、Burp...

EUVD-2026-69781

A vulnerability was found in zhayujie CowAgent up to 2.1.3. This impacts the function BrowserTool of the file agent/tools/browser/browsertool.py of the component Browser Tool. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made...

CVE-2026-84425 zhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of service

A vulnerability was found in zhayujie CowAgent up to 2.1.3. This impacts the function BrowserTool of the file agent/tools/browser/browsertool.py of the component Browser Tool. Performing a manipulation results in denial of service. The attack can be initiated remotely. The exploit has been made...

CVE-2026-84425

zhayujie CowAgent (versions up to 2.1.3) is vulnerable to a remote denial of service in the BrowserTool function within agent/tools/browser/browser_tool.py (the Browser Tool component). An attacker with low privileges can trigger the DoS remotely with low complexity and no user interaction. A pro...

exploit-CVE-2015-1427

Elasticsearch 1.4.0 1.4.2 원격 코드 실행 Elasticsearch는 점점 더 많은 사용 사례를 해결할 수 있는 분산형 RESTful 검색 및 분석 엔진입니다. Elastic Stack의 핵심으로서 데이터를 중앙에 저장하여 예상한 결과를 발견하고 예상치 못한 결과를 찾아낼 수 있게 해줍니다. 취약한 환경 테스트를 위해 취약한 환경을 설정하려면 Docker가 설치되어 있어야 하며, 다음 명령어를 실행하기만 하면 됩니다: root@kitploit: docker build -t vuln/cve-2015-1427...

exploit-CVE-2015-3306

ProFTPd 1.3.5 - modcopy Удаленное выполнение команд ProFTPD — это высоконастраиваемый FTP-демон для Unix и Unix-подобных операционных систем. ProFTPD возник из желания создать безопасный и настраиваемый FTP-сервер. Он был вдохновлён значительным восхищением веб-сервером Apache. В отличие от...

cve-2024-6387-poc

cve-2024-6387-poc состояние гонки в обработчике сигнала в сервере OpenSSH sshd 7etsuo Описание Эксплойт для CVE-2024-6387, нацеленный на состояние гонки в обработчике сигнала в сервере OpenSSH sshd на Linux-системах с glibc. Уязвимость позволяет удалённое выполнение кода с правами root из-за вызо...

Spring4ShellPoC

Spring4ShellPoC Spring4Shell PoC CVE-2022-22965 Просто играю с эксплойтом. Модифицировано на основе отличной работы BobTheShopLifter, https://github.com/BobTheShoplifter/Spring4Shell-POC и TryHackMe, https://tryhackme.com/room/spring4shell Небольшие доработки. Добавлены некоторые дополнительные...

exploit-CVE-2016-9920

Roundcube 1.0.0 Roundcube 1.2.2 및 이전 버전에서는 사용자 제어 입력이 검증되지 않은 채 PHP의 내장 함수 mail 호출의 다섯 번째 인수로 흘러 들어가며, 이는 보안 측면에서 중요하다고 문서화되어 있습니다. 문제는 mail 함수를 호출하면 PHP가 sendmail 프로그램을 실행하게 된다는 것입니다. 다섯 번째 인수는 이 실행에 추가 매개변수를 전달할 수 있게 해주므로 sendmail을 구성할 수 있습니다. sendmail은 모든 메일 트래픽을 파일에 기록하는 -X 옵션...

CVE-2024-23346-rust-exploit

CVE-2024-23346을 위한 Rust 기반 익스플로잇 스크립트. 아래와 같이 POC는 코드 인젝션 취약점을 이용하여 터미널에서처럼 원격 셸 명령을 실행합니다. poc.webm 익스플로잇 실행 단계: Cargo로 직접 실행 cargo run -- --help cargo run -- --target http://10.10.11.38 --username "Admin" --password "Admin@123" --lhost 10.10.14.19 또는 바이너리 컴파일: cargo build -r 바이너리는...

Exim-CVE-2018-6789

Exim CVE-2018-6789 CVE-2018-6789を悪用するためのPoC資料。PoCを説明するブログ記事はSynacktiv ブログで入手可能です。 このPoCは脆弱なEximサーバーに接続し、CVE-2018-6789を悪用します。 使用方法 root@kitploit: usage: exploit -hv options: -h, --help Print this help -v, --verbose Enable verbose output...

CVE-2018-14667

CVE-2018-14667 このCVEを理解し、正しく悪用するために多くの時間を費やした後、RichFaces 3.X RCEバグに関するリポジトリを構築し、そのHOWTOをコミュニティと段階的に共有することにしました。 0x00 : RichFaces 3.X バグの概要 11月19日月曜日、 Joao F M Figueiredo 氏は、重大な高リスクのRichFaces脆弱性に関する詳細な記事（https://seclists.org/fulldisclosure/2018/Nov/47）を公開しました。 CVSS3 ベーススコア 9.8...