cve-2019-1458_POC

CVE-2019-1458：从“在野利用报告”到 POC 简介 12月，卡巴斯基发布了一篇关于被在野利用的0day漏洞1的博客文章。这引起了我的兴趣，因为尽管他们描述了该漏洞利用的工作原理，但他们的分析中没有提供任何 POC。 这就是为什么我决定尝试基于卡巴斯基的博客文章和补丁分析来为这个漏洞编写 POC。 这篇文章描述了我这样做的过程。 信息收集： 第一件事是尽可能多地收集有关此漏洞的信息。 阅读上述博客文章后，我提取了以下信息： 该漏洞与窗口切换功能有关 触发需要模拟按下 ALT 键 需要两次调用未文档化的 NtUserMessageCall API 需要创建一个特殊的切换窗口...

CVE-2023-28252

CVE-2023-28252 关于Windows漏洞CVE-2023-28252学习的简要总结 这个周末我在Hack The Box上练习Aero机器。当你能够模拟对Windows 11机器的真实攻击时，这台机器玩起来非常有趣。完成之后，我很好奇并想知道权限提升漏洞是如何工作的。于是我主要阅读了漏洞作者撰写的文章1。描述非常详细，解释得很清楚。但通读整个过程需要很多时间。为了更好地展示漏洞利用工作流程，我想在此将过程可视化。向漏洞作者Ricardo narvaja和Esteban kazimirow以及来自奇安信的作者2致以崇高的敬意。 1...

CVE-2022-4262

Exploit para CVE-2022-4262 Informe de error oficial de Chromium. Reconocimiento a @clem1 por descubrir el exploit ITW. Reconocimiento a @5aelo por su RCA sobre el error. Reconocimiento a @bjrjk por su RCA súper detallado sobre el error. Reconocimiento a @alisaesage por su video sobre el error...

CVE-2016-7255

CVE-2016-7255 使用 CVE-2016-7255 的概念验证权限提升利用程序，旨在复现 Trend Micro 所述的在野利用程序的功能。 在将其用于任何重要场合之前，你可能需要修复恢复功能。 部分代码取自 tinysec 的原始 崩溃 PoC 和 ReactOS 项目。...

Inside the Fix: Analysis of In-the-Wild Exploit of CVE-2026-21513

Read how PatchDiff-AI uncovered the root cause of CVE-2026-21513 — an actively exploited MSHTML vulnerability — and how APT28 leveraged it in real-world attacks...

[SECURITY] [DSA 6135-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6135-1 [email protected] https://www.debian.org/security/ Andres Salomon February 14, 2026 https://www.debian.org/security/faq -...

VulnCheck KEV: CVE-2025-2857

Following the recent Chrome sandbox escape CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0470-1 Rating: important References: 1254776 Cross-References: CVE-2025-14372 CVE-2025-14373 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes two vulnerabilities is now available...

openSUSE 16 Security Update : chromium (openSUSE-SU-2025:20161-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:20161-1 advisory. - Chromium 143.0.7499.109 boo1254776: CVE-2025-14372: Use after free in Password Manager CVE-2025-14373: Inappropriate implementation in Toolbar...

CVE-2025-66644

Array Networks ArrayOS AG before 9.4.5.9 allows command injection, as exploited in the wild in August through December 2025...

CVE-2024-58274

Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2024-08-01 allows execution of a command within $ in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025...

Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code

Fortinet is alerting customers of a critical security flaw in FortiSIEM for which it said there exists an exploit in the wild. The vulnerability, tracked as CVE-2025-25256 , carries a CVSS score of 9.8 out of a maximum of 10.0. "An improper neutralization of special elements used in an OS command...

DEBIAN-CVE-2024-9680

An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1, Thunderbird...

Researchers Reveal Detail for Windows Zero-Day Vulnerability Patched Last Month

Details have emerged about a now-patched security flaw in Windows Common Log File System CLFS that could be exploited by an attacker to gain elevated permissions on compromised machines. Tracked as CVE-2022-37969 CVSS score: 7.8, the issue was addressed by Microsoft as part of its Patch Tuesday...

The quantum state of Linux kernel garbage collection CVE-2021-0920 (Part I)

A deep dive into an in-the-wild Android exploit Guest Post by Xingyu Jin, Android Security Research This is part one of a two-part guest blog post, where first we'll look at the root cause of the CVE-2021-0920 vulnerability. In the second post, we'll dive into the in-the-wild 0-day exploitation o...

Microsoft Releases Workarounds for Office Vulnerability Under Active Exploitation

Microsoft on Monday published guidance for a newly discovered zero-day security flaw in its Office productivity suite that could be exploited to achieve code execution on affected systems. The weakness, now assigned the identifier CVE-2022-30190, is rated 7.8 out of 10 for severity on the CVSS...

TFW you-get-really-excited-you-patch-diffed-a-0day-used-in-the-wild-but-then-find-out-it-is-the-wrong-vuln

Posted by Maddie Stone, Project Zero INTRODUCTION I’m really interested in 0-days exploited in the wild and what we, the security community, can learn about them to make 0-day hard. I explained some of Project Zero’s ideas and goals around in-the-wild 0-days in a November blog post. On December’s...

In-the-wild iOS Exploit Chain 1

Posted by Ian Beer, Project Zero TL;DR This exploit provides evidence that these exploit chains were likely written contemporaneously with their supported iOS versions; that is, the exploit techniques which were used suggest that this exploit was written around the time of iOS 10. This suggests...

In-the-wild iOS Exploit Chain 5

Posted by Ian Beer, Project Zero TL;DR This exploit chain is a three way collision between this attacker group, Brandon Azad from Project Zero, and @S0rryMybad from 360 security. On November 17th 2018, @S0rryMybad used this vulnerability to win $200,000 USD at the TianFu Cup PWN competition...

flash-plugin: use-after-free causing remote code execution (APSB18-03)

A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the...