1712 matches found
EUVD-2026-116584
The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written...
CVE-2026-109836
The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL, which may allow physical memory to be read or written...
CVE-2026-109836
The Core Temp kernel driver provided by ALCPU is vulnerable to insufficient access control in an exposed IOCTL . This security flaw may allow an attacker to read or write physical memory . The CVSS v4.0 score for this vulnerability is 8.4 (High) , indicating a significant impact on confidentialit...
CVE-2026-25645
CVE-2026-25645 Insecure Temporary File Reuse in requests.utils.extractzippedpaths Executive Summary A vulnerability was identified in the requests library Python within the public utility function requests.utils.extractzippedpaths. The function utilizes a predictable, non-unique filename when...
CVE-2025-63945-Tencent-iOA-EoP
CVE-2025-63945 Tencent iOA EoP Version : before 210.9.28693.62001 Summary: I discovered a vulnerability in Tencent PC Manager where files and directories under C:\Windows\Temp are insecurely handled. An attacker can leverage symbolic link symlink attacks to coerce a SYSTEM-privileged process into...
CVE-2024-0670
CVE-2024-0670 PoC This repository provides a Proof of Concept PoC exploit for the CVE-2024-0670 vulnerability, affecting the CheckMK Agent on Windows systems. The vulnerability occurs when the CheckMK Agent creates and executes temporary files in the C:\Windows\Temp directory. An attacker can abu...
plague
plague Default Detections for EDR The detections detailed below are what I attempt to establish on any EDR product I deploy or work on. Take your own considerations for criticality and datasets. Check out this post for how you can work on achieving detections...
cve-2019-1422
cve-2019-1422 A worthless vulnerability, garbage. Retest manually deleting teredo.txt or iphttps.txt under the c:\windows\temp directory...
disclosures
Disclosures This is a repository documenting security issues I have encountered. Citrix client for Linux leaks credentials to syslog Citrix Linux client insecure temporary ICA file creation CVE-2023-24486...
CVE-2025-25599
CVE-2025-25599 Details Bolt is an open-source content management system built using the Symfony PHP framework. During a short security assessment, Certitude identified several vulnerabilities including an arbitrary file read. Users with the role EDITOR , CHIEFEDITOR , ADMIN , or DEVELOPER may abu...
CVE-2024-0670-CheckMK-Agent-Local-Privilege-Escalation-Exploit
CVE-2024-0670 – CheckMK Agent Local Privilege Escalation PoC This repository contains a simple and clean proof-of-concept for CVE-2024-0670, a local privilege escalation vulnerability in the CheckMK Windows Agent. A low-privileged user can gain SYSTEM privileges by abusing writable temp file path...
CLEANSTART-2026-VY27006 WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K
Security vulnerability affects the apache-nifi package. A WebFlux server application that processes multipart requests creates temp files for parts larger than 10 K...
CVE-2014-5284
CVE-2014-5284 Bash implementation of CVE-2014-5284 Exploit Title: ossec 2.8 Insecure Temporary File Creation Vulnerability Privilege Escalation Python is nice but doesn't work all the time Exploit Author: mbadanoiu Python Exploit Author: skynet-13 Vendor Homepage: www.ossec.net/ Software Link:...
CVE-2026-30332
CVE-2026-30332 Description A Time-of-Check to Time-of-Use TOCTOU vulnerability was identified in Balena Etcher for Windows in versions prior to 2.1.4. The application creates a temporary .cmd file in a user writable directory and later executes it with elevated privileges via UAC. This allows an...
cve-2019-2215-markw
Bad Binder for markw !CAUTION Everything you do is at your own risk. I am not responsible for your broken device. Adapted with Deepseek V4 Flash Made for the latest Global MIUI 10. Overview Main goal: Get temp root on latest official miui Root can be used for flashing custom abootwhich is what I...
CVE-2025-5880
Whistle 2.9.98 contains an unpatched path traversal vulnerability because the /cgi-bin/sessions/get-temp-file endpoint fails to adequately sanitize user input in the filename parameter. By supplying absolute paths or traversal sequences like /etc/passwd, an attacker can bypass directory...
TeamViewer Full Client permission and access control issue vulnerability
TeamViewer Full Client and TeamViewer Host versions prior to 15.82 including Windows 7 and older versions of Windows 8 up to 15.64.10 contain a privilege escalation and access control vulnerability. This vulnerability stems from improper access control in the installer’s temp directory; locally...
FortiLogger 4.4.2.2 - Arbitrary File Upload
FortiLogger 4.4.2.2 is affected by arbitrary file upload issues. Attackers can send a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then Assets/temp/hotspot/img/logohotspot.asp. id: CVE-2021-3378 info: name: FortiLogger 4.4.2.2 - Arbitrary File Upload author:...
PT-2026-123187
V-SFT provided by FUJI ELECTRIC CO., LTD. contains an out-of-bounds read vulnerability in VS6MemInIF!set temp type default. Opening a crafted V7 file may lead to information exposure or arbitrary code execution on the affected product...