228986 matches found
PT-2026-64080
A vulnerability was found in bytedance InfiniStore up to 0.2.33. The impacted element is the function purge kv map in the library /src/infinistore.h of the component KV Map Handler. Performing a manipulation results in inefficient algorithmic complexity. The attack requires a local approach. The...
KLA91177 PE vulnerabilities in Microsoft Office
Privilege escalation vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure DNS can be exploited remotely to gain privileges. 2. An...
PT-2026-63996
A security vulnerability has been detected in release-it conventional-changelog up to 11.0.1. This affects the function writeChangelog of the file index.js of the component Changelog File Handler. Such manipulation of the argument infile leads to os command injection. The attack must be carried o...
Google Chrome Resource Management Error Vulnerability (CNVD-2026-30671)
Chrome is a web browser developed by Google. Google Chrome has a security vulnerability, which stems from an issue with the CameraCapture module that allows for reuse after release. Attackers can exploit this vulnerability to achieve sandbox escape through specially crafted HTML pages...
PT-2026-64194
Name of the Vulnerable Software and Affected Versions Ne-Lexa php-zip versions prior to 4.0.3 Description A path traversal issue exists in the ZIP Handler component within the ZipFile::extractTo function located in the src/ZipFile.php file. A remote attacker can exploit this by manipulating the...
PT-2026-64183
Name of the Vulnerable Software and Affected Versions localstack serverless-localstack versions prior to 1.4.1 Description An OS command injection issue exists within the Configuration Handler component in the src/index.js file. This occurs when the custom.localstack.docker.compose file argument ...
PT-2026-64189
Name of the Vulnerable Software and Affected Versions CodeAstro Online Classroom version 1.0 Description Remote SQL injection is possible due to improper handling of the aid argument within the '/OnlineClassroom/loginlinkadmin.php' endpoint. SQL injection is a technique where an attacker inserts...
CVE-2026-16632
A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocketonprotocolerror in the library lib/facil/http/parsers/websocketparser.h of the component WebSocket Frame Parser. This manipulation of the argument onmessage causes improper input validation. The attack can ...
CVE-2026-16632 boazsegev facil.io WebSocket Frame websocket_parser.h websocket_on_protocol_error input validation
A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocketonprotocolerror in the library lib/facil/http/parsers/websocketparser.h of the component WebSocket Frame Parser. This manipulation of the argument onmessage causes improper input validation. The attack can ...
CVE-2026-16632
CVE-2026-16632 affects boazsegev facil.io up to 0.7.4, specifically the WebSocket Frame Parser component. The vulnerability is in websocket_on_protocol_error (library file lib/facil/http/parsers/websocket_parser.h) where manipulation of the on_message argument leads to improper input validation. ...
CVE-2026-16631
The CVE-2026-16631 entry concerns publint up to version 0.1.4 where the pack.js file in the package-manager Command Handler uses child_process.exec, enabling os command injection. Local attack required; exploit is public. A patch identified as adf2d9a09945fc98c85a2520a89f441d78b2dbd8 exists and s...
CVE-2026-16630
Vulnerability detail (CVE-2026-16630): Syncfusion ej2-javascript-ui-controls up to v33.2.3 contains a flaw in the function child_process.exec of package.json that enables local OS command execution. Reports indicate local access is required, and the exploit has been publicly disclosed. Affected c...
CVE-2026-16628 oclif JIT Plugin Entry child_process.exec os command injection
A vulnerability was detected in oclif up to 4.23.16. Affected by this vulnerability is the function childprocess.exec of the component JIT Plugin Entry Handler. Performing a manipulation of the argument jitPlugins results in os command injection. The attack is only possible with local access. The...
CVE-2026-13077 Out-of-Bounds Heap Read in BSON CodeWScope Element Parsing via Malformed BSONColumn Data
A missing bounds check in the BSON CodeWScope element accessors allows an attacker to trigger an out-of-bounds heap read via a crafted aggregation pipeline. The vulnerability can be exploited by an authenticated user by generating a malformed BSONColumn data containing a CodeWScope element,...
EternalBlue-MS17-010-Vulnerability
EternalBlue MS17-010 Vulnerability Analysis This repository...
Exploit for Deserialization of Untrusted Data in Microsoft
cve-id ⚡ Simple Usage Use this project only in safe and...
EUVD-2026-47587
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /BSIS.php. Performing a manipulation of the argument day results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be...
EUVD-2026-47565
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /class.php. Such manipulation of the argument day leads to cross site scripting. The attack can be launched remotely. The exploit has been...
EUVD-2026-47576
Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...