GLSA-202608-11 : haveged: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202608-11 haveged: Privilege escalation A vulnerability has been discovered in haveged. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo...

HiSilicon Encoder - Path Traversal Detection (CVE-2020-24219)

Detects CVE-2020-24219 by reading /etc/passwd via /../../sys/devices/media/13070000.jpgd/../../../etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """HiSilicon encoder /sys/devices/media path traversal CVE-2020-24219.""" import re from kittysploit import from lib.protocols.http.httpclient...

TBK DVR - OS Command Injection Detection (CVE-2024-3721)

TBK DVR devices and rebrands allow unauthenticated OS command injection via /device.rsp?opt=sys&cmd=SOSTREAMAX&mdb=sos&mdc= with Cookie uid=1. !/usr/bin/env python3 -- coding: utf-8 -- """TBK DVR OS command injection via device.rsp CVE-2024-3721.""" import re from urllib.parse import quote from...

EUVD-2026-54976

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...

CVE-2026-19380 Mullvad wireguard.sys IOCTL AdapterState reference count

A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...

CVE-2026-45808

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks lease identifiers can have their lease and underlying credential revoked or renewed by a user in another tenant via th...

CVE-2026-45808 OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks lease identifiers can have their lease and underlying credential revoked or renewed by a user in another tenant via th...

CVE-2026-46405 OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, in OpenBao's Kerberos auth method on the GET handler, or when an Authorization: Negotiate header is supplied, the response is includes a logical.Auth object in addition to an error message. This results in...

CVE-2026-19195 V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access control

A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack needs to be performed locally. The exploit has been disclosed ...

CVE-2026-19193 Jiangmin Antivirus Minifilter Port kvcore.sys MessageNotifyCallback access control

A flaw has been found in Jiangmin Antivirus 21. Impacted is the function MessageNotifyCallback in the library kvcore.sys of the component Minifilter Port. Executing a manipulation can lead to improper access controls. The attack needs to be launched locally. The exploit has been published and may...

CVE-2026-45808: Incorrect Authorization

OpenBao is an open source identity-based secrets management system. Prior to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. A tenant who intentionally leaks lease identifiers can have their lease and underlying credential revoked or renewed by a user in another tenant via th...

EUVD-2026-52326

Improper access control in the IRPMJWRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local privilege escalation to NT AUTHORITY\SYSTEM, extract credentials from PPL-protected lsass.exe, and terminate PPL-protected...

CVE-2026-15430 CVE-2026-15430

Improper access control in the IRPMJWRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local privilege escalation to NT AUTHORITY\SYSTEM, extract credentials from PPL-protected lsass.exe, and terminate PPL-protected...

CVE-2026-15430

The Wellbia XIGNCODE3 anti-cheat software, specifically the xhunter2.sys driver version 2026.6.1.192 , contains an improper access control vulnerability within the IRP_MJ_WRITE command interface. This flaw enables a local, unprivileged attacker to achieve local privilege escalation to NT AUTHORIT...

CVE-2026-15430: Improper Privilege Management

Improper access control in the IRPMJWRITE command interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivileged attacker to achieve local privilege escalation to NT AUTHORITY\SYSTEM, extract credentials from PPL-protected lsass.exe, and terminate PPL-protected...

Fedora 43 : libgit2 / rust-libgit2-sys (2026-61dffcfbe9)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-61dffcfbe9 advisory. - Update libgit2 to version 1.9.6. - Update the libgit2-sys Rust crate to the corresponding version 0.18.7. This includes fixes for various security...

[SECURITY] Fedora 43 Update: rust-libgit2-sys-0.18.7-1.fc43

Native bindings to the libgit2 library...

Linux Distros Unpatched Vulnerability : CVE-2026-53583

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your...

Linux Distros Unpatched Vulnerability : CVE-2026-53584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your...

Linux Distros Unpatched Vulnerability : CVE-2026-53585

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your...