211485 matches found
EUVD-2026-100467
Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authenticated users to make the server fetch arbitrary URLs by supplying repository URL and stackfile values. Attackers can send stack templates pointing to internal services or clou...
CVE-2026-110255
Finsys Dockhand versions prior to 1.0.43 are vulnerable to a response-disclosing Server-Side Request Forgery (SSRF) . Authenticated users can force the server to fetch arbitrary URLs by providing malicious repository URL and stackfile values. By pointing stack templates toward internal services o...
CVE-2026-110255 Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint
Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authenticated users to make the server fetch arbitrary URLs by supplying repository URL and stackfile values. Attackers can send stack templates pointing to internal services or clou...
CVE-2026-43783
CVE-2026-43783: Repair Permissions - Get Root: LPE via DesktopServicesHelper in macOS 26.5 Originally published on PT SWARM or andrd3v.github.io The daemon that Finder uses to "repair" permissions on iCloud files turned out to be willing to repair permissions on anything - including system...
CVE-2026-102204 Microsoft Microsoft Defender for Endpoint Elevation of Privilege Vulnerability
...
CVE-2026-102204 Microsoft Microsoft Defender for Endpoint Elevation of Privilege Vulnerability
...
EUVD-2026-100358
Improper link resolution before file access 'link following' in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...
CVE-2026-102204
A vulnerability in Microsoft Defender for Endpoint (CVE-2026-102204) arises from improper link resolution before file access (link following). This flaw allows an authorized attacker to achieve local privilege elevation . According to NCSC documentation, this could potentially lead to the access ...
CVE-2026-100202 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
...
EUVD-2026-100315
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...
CVE-2026-100202 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
...
CVE-2026-100202
A Use after free vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated as CRITICAL with a CVSS score of 9.80 . While specific exploit links are not provided, the doc...
EUVD-2026-100220
Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network...
CVE-2026-96300 RPC Endpoint Mapper Service Denial of Service Vulnerability
...
CVE-2026-96300 RPC Endpoint Mapper Service Denial of Service Vulnerability
...
CVE-2026-96300
The RPC Endpoint Mapper Service is susceptible to an uncontrolled resource consumption vulnerability. This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is associated with CWE-770 , which involves the allocation of resources wit...
CVE-2026-85874 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
...
EUVD-2026-100063
Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally...
CVE-2026-85874 Windows Message Queuing Queue Manager Remote Code Execution Vulnerability
...
CVE-2026-85874
A Use after free vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to achieve local code execution . The vulnerability is categorized under CWE-416 and has a high severity rating with a CVSS 3.1 base score of 7.8 . No specific exploit info...