Exploit for Improper Authorization in Microsoft

cve-id Donate Support the maintenance of this project wit...

RollerCoaster

RollerCoaster: Advanced Exploitation of Cisco ASA LINA Firmwar...

Exploit for CVE-2026-60206

CVE-2026-60206 – Oracle WebLogic Server SAML Authentication By...

CVE-2026-64368

creationtimestamp| type| source ---|---|--- 2026-07-25 15:07:38+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mri5gshjlr2t 2026-07-25 15:07:39+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116981239523000883...

CVE-2023-27944

creationtimestamp| type| source ---|---|--- 2026-07-25 15:00:19+00:00| seen| https://t.me/ZerodayAlert/379...

CVE-2024-50337

creationtimestamp| type| source ---|---|--- 2026-07-25 15:00:17+00:00| seen| https://t.me/ZerodayAlert/435...

CVE-2026-15682

creationtimestamp| type| source ---|---|--- 2026-07-25 15:00:05+00:00| seen| https://t.me/ZerodayAlert/772...

Exploit for CVE-2026-16723

cve-id Donate Support the maintenance of this project wit...

CVE-2026-59949 vulnerabilities

Vulnerabilities for packages: kafka, kafka-fips...

CVE-2026-54089 vulnerabilities

Vulnerabilities for packages: filebrowser...

CVE-2026-10681

In Zephyr's userspace dynamic-objects subsystem, threadidxalloc in kernel/userspace/userspace.c allocated a new thread permission index from the global threadidxmap bitmap without holding listslock. On SMP systems, two user-mode threads invoking the kobjectallocKOBJTHREAD syscall concurrently can...

CVE-2026-64374

creationtimestamp| type| source ---|---|--- 2026-07-25 14:12:28+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mri2e5d5wm2v 2026-07-25 14:12:29+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116981022580631486...

CVE-2026-10681 SMP race in `thread_idx_alloc()` lets concurrent `k_object_alloc(K_OBJ_THREAD)` callers share a kernel-object permission slot

In Zephyr's userspace dynamic-objects subsystem, threadidxalloc in kernel/userspace/userspace.c allocated a new thread permission index from the global threadidxmap bitmap without holding listslock. On SMP systems, two user-mode threads invoking the kobjectallocKOBJTHREAD syscall concurrently can...

EUVD-2026-49045

In Zephyr's userspace dynamic-objects subsystem, threadidxalloc in kernel/userspace/userspace.c allocated a new thread permission index from the global threadidxmap bitmap without holding listslock. On SMP systems, two user-mode threads invoking the kobjectallocKOBJTHREAD syscall concurrently can...

CVE-2026-10681

In Zephyr's userspace dynamic-objects subsystem, threadidxalloc in kernel/userspace/userspace.c allocated a new thread permission index from the global threadidxmap bitmap without holding listslock. On SMP systems, two user-mode threads invoking the kobjectallocKOBJTHREAD syscall concurrently can...

CVE-2026-10681

The CVE-2026-10681 issue affects Zephyr's userspace dynamic-objects subsystem. In thread_idx_alloc(), a new thread permission index is taken from _thread_idx_map[] without holding lists_lock. On SMP, concurrent k_object_alloc(K_OBJ_THREAD) calls can observe the same lowest free bit and perform a ...

Exploit for Unrestricted Upload of File with Dangerous Type in Ollyo Sp_Page_Builder

🛡️ CVE-2026-48908 Analysis Unauthenticated Arbitrary File...

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process. Tracked as CVE-2026-1672...

Exploit for CVE-2026-14266

CVE-2026-14266 — 7-Zip XZ Decoder Heap Buffer Overflow Cr...

CVE-2026-64263

creationtimestamp| type| source ---|---|--- 2026-07-25 12:02:22+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116980510998731708 2026-07-25 12:02:22+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mrht3j2bwa23...