Firefox-CVE-2024-9680

Firefox CVE-2024-9680 CVE-2024-9680 Descripción Un atacante logró ejecutar código en el proceso de contenido explotando un use-after-free en las líneas de tiempo de animación CSS. Hemos recibido informes de que esta vulnerabilidad está siendo explotada activamente. Esta vulnerabilidad afecta a...

CVE-2021-40444

〖EXP〗Ladon CVE-2021-40444 Reproducción de vulnerabilidad de Office Resumen de la vulnerabilidad El 8 de septiembre, hora de Beijing, el CERT de NSFOCUS monitoreó un comunicado de seguridad de Microsoft que revelaba la vulnerabilidad de ejecución remota de código en Microsoft MSHTML. Los atacantes...

cve-2023-5217-poc

CVE-2023-5217: Desbordamiento de Montón en Codificación VP8 de libvpx PoC CVE-2023-5217 es una vulnerabilidad de libvpx explotada in-the-wild que fue encontrada por Clément Lecigne del Grupo de Análisis de Amenazas de Google para estar atacando Chrome. Este repositorio muestra cómo desencadenar...

CVE-2026-0257

CVE-2026-0257 Vulnerabilidad de omisión de autenticación en PAN-OS GlobalProtect ⚡ Uso simple Utilice este proyecto solo en entornos seguros y autorizados, como: Máquinas virtuales locales Contenedores Docker Configuraciones de laboratorio aisladas Entornos de pruebas de penetración autorizados...

CVE-2023-38831-RaRCE

RaRCE, Generador de exploits para CVE-2023-38831 Esta es una herramienta fácil de instalar y usar, un generador de exploits versátil para CVE-2023-38831, una vulnerabilidad que afecta a versiones de WinRAR anteriores a la 6.23. RARLabs WinRAR anterior a la versión 6.23 permite a los atacantes...

CVE-2022-26134-LAB

CVE-2022-26134-LAB Confluence Server and Confluence Data Center include a significant unauthenticated remote code execution vulnerability identified as CVE-2022-26134, according to a security advisory released by Atlassian on June 2, 2022. The vulnerability was unpatched when it was published on...

CVE-2022-47986

CVE-2022-47986 Perché Questa vulnerabilità viene sfruttata in the wild. IceFire usa questa vulnerabilità per distribuire il ransomware sui sistemi presi di mira; vorrei aiutare i team SOC/Blue a identificare i sistemi interessati e i Pentester/Red team a sfruttarla e segnalarla. Descrizione...

CVE-2025-66478

CVE-2025-66478 - Analisi dei Log di Attacchi Reali per la RCE delle Server Actions di Next.js Panoramica Questo progetto raccoglie log di attacchi reali registrati da un'applicazione Next.js 15.1.2 esposta su Internet eseguita in un contenitore Docker. Questi log mostrano lo scanning e lo...

cve-2024-0519-rca-research

CVE-2024-0519 — RCA अनुसंधान CVE-2024-0519 के लिए मूल कारण विश्लेषण कलाकृतियाँ V8 आउट-ऑफ-बाउंड मेमोरी एक्सेस, Chrome 120, जंगली में शोषित। फिक्स : e0f2a195d87c9a06685121e0e783efd92d030df3 — Toon Verwaest, 2024-01-12 अध्ययन किया गया V8 संस्करण : 12.0.267.16 fbc4963bbff, ARM64 macOS फ़ाइलें...

CVE-2021-30632

Von: https://github.com/github/securitylab/tree/main/SecurityExploits/Chrome/v8/CVE-2021-30632 Die Analyse dieses Bugs findest du hier. Es handelt sich um einen Chrome-Bug, der von einem anonymen Forscher gemeldet wurde und von dem angenommen wird, dass er in freier Wildbahn ausgenutzt wurde. Der...

CVE-2026-2441-PoC

CVE-2026-2441-PoC PoC per CVE-2026-2441 PoC per Use-After-Free in CSS di Chrome Blink CSSFontFeatureValuesMap PoC che attiva la UAF nell'elaborazione CSS → RCE nel renderer all'interno della sandbox su Chrome =144.0.x tutte le piattaforme. Trigger: @font-feature-values + container-query + ricalco...

CVE-2023-24059

CVE-2023-24059 Grand Theft Auto V para PC permite que atacantes obtenham execução remota parcial de código ou modifiquem arquivos em um PC, conforme explorado ativamente em janeiro de 2023. autenticação| complexidade| vetor ---|---|--- não disponível| não disponível| não disponível...

PT-2026-79386

Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.4.21 Description Unauthenticated remote attackers can execute arbitrary code due to a code injection flaw. This issue occurs when the analyse resultat skel function mishandles the X-Spip-Filtre HTTP request header. Thi...

CVE-2026-48172

LiteSpeed User-End cPanel Plugin before 2.4.5 allows privilege escalation possibly to root, as exploited in the wild in May 2026. Detection is best done via a command line of grep -rE "cpaneljsonapifunc=redisAble" /var/cpanel/logs /usr/local/cpanel/logs/ 2/dev/null in Bash. If you get no output,...

Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS

Fortinet has released out-of-band patches for a critical security flaw impacting FortiClient EMS that it said has been exploited in the wild. The vulnerability, tracked as CVE-2026-35616 CVSS score: 9.1, has been described as a pre-authentication API access bypass leading to privilege escalation...

Google Confirms CVE-2026-21385 in Qualcomm Android Component Exploited

Google on Monday disclosed that a high-severity security flaw impacting an open-source Qualcomm component used in Android devices has been exploited in the wild. The vulnerability in question is CVE-2026-21385 CVSS score: 7.8, a buffer over-read in the Graphics component. "Memory corruption when...

CVE-2025-66644

CVE-2025-66644 affects Array Networks ArrayOS AG before 9.4.5.9, with an OS command injection vulnerability that could allow an attacker to execute arbitrary commands. Exploitation has been observed in the wild between August and December 2025, impacting ArrayOS AG versions up to 9.4.5.8. Remedia...

CVE-2025-64446: Critical Vulnerability in Fortinet FortiWeb Exploited in the Wild

Overview On October 6, 2025, the cyber deception company Defused published a proof-of-concept exploit on social media that was captured by one of their Fortinet FortiWeb Manager honeypots. FortiWeb is a Web Application Firewall WAF product that is designed to detect and block malicious traffic to...

CVE-2023-53691

Hikvision CSMP Comprehensive Security Management Platform iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025...

PT-2025-42217

VestaCP commit a3f0fa1 2018-05-31 up to commit ee03eff 2018-06-13 contain embedded malicious code that resulted in a supply-chain compromise. New installations created from the compromised installer since at least May 2018 were subject to installation of Linux/ChachaDDoS, a multi-stage DDoS bot...