umair-aziz025

3 exploits Active since Sep 2021
CVE-2021-33044 NOMISEC CRITICAL WORKING POC
Dahua - Auth Bypass
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.
2 stars
CVSS 9.8
CVE-2025-31700 NOMISEC HIGH WORKING POC
Dahua - Buffer Overflow
A vulnerability has been found in Dahua products. Attackers could exploit a buffer overflow vulnerability by sending specially crafted malicious packets, potentially causing service disruption (e.g., crashes) or remote code execution (RCE). Some devices may have deployed protection mechanisms such as Address Space Layout Randomization (ASLR), which reduces the likelihood of successful RCE exploitation. However, denial-of-service (DoS) attacks remain a concern.
2 stars
CVSS 8.1
CVE-2026-5281 NOMISEC HIGH WORKING POC
Google Chrome < 146.0.7680.178 - Use After Free
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVSS 8.8