3220 matches found
CVE-2026-81581
WibuKey up to 6.70 for Windows contains an improper validation of memory boundaries vulnerability in its WibuKey64.sys kernel driver. User input is used without proper sanitization to compute a pointer address, allowing an attacker to point to arbitrary memory outside the driver's scope. The typi...
EUVD-2026-66985
Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remo...
EUVD-2026-66984
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...
PT-2026-82481
Name of the Vulnerable Software and Affected Versions WibuKey versions prior to 6.71 Description Improper validation of memory boundaries in the WibuKey64.sys driver allows an attacker to set pointers outside the program scope. This occurs because user input is used without proper sanitization to...
CVE-2026-81579: Write-what-where Condition
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...
CVE-2026-81581: Improper Restriction of Operations within the Bounds of a Memory Buffer
Improper validation of memory boundaries in WibuKey64.sys of WibuKey up to 6.70 for Windows can be exploited by an attacker by setting the pointers outside the scope of the program. This usually results in a denial of service, yet we cannot rule out the possibility of exploits that can cause Remo...
CVE-2026-75336: Improper Neutralization of Special Elements used in an SQL Command
Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json...
CVE-2026-75336
Funiture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select.json and /sys/tool/update.json...
SOC kernel driver Heap Buffer Overflow DoS
The vulnerability of the mpfssyscontrollerprobe function in the drivers/soc/microchip/mpfs-sys-controller.c file of the Linux operating system’s SOC System on Chip kernel module is related to improper memory release. Exploitation of this vulnerability can allow a remote attacker to cause a servic...
MAL-2026-15797 Malicious code in ultra-max-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ultra-max-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15793 Malicious code in tiny-smart-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-smart-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15790 Malicious code in tiny-safe-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-safe-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15787 Malicious code in tiny-pro-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in tiny-pro-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-15782 Malicious code in super-sharp-sys (RubyGems)
--- -= Per source details. Do not edit below this line.=-...