[SECURITY] [DSA 6536-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6536-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 01, 2026 https://www.debian.org/security/faq -...

cve-2025-59489

Herramienta de Detección de Vulnerabilidad Unity CVE-2025-59489 Herramienta de detección automatizada de vulnerabilidades de inyección en Unity Runtime, diseñada específicamente para plataformas de juegos Android. Resumen de la Vulnerabilidad ID CVE : CVE-2025-59489 Puntuación CVSS : 8.4 Alta...

CVE-2026-23744-Remote-Code-Execution-POC

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Prueba de Concepto POC MCPJam inspector 3. Ejecute el exploit python3 exploit.py...

Dissecting-CVE-2026-0628-Chromium-Extension-Privilege-Escalation

= doi.org/10.5281/zenodo.18413764 = orcid.org/0009-0007-7728-256X README.md CVE-2026-0628: Escalada de Privilegios en Chromium WebView Suplantación de Origen – Investigación Técnica y Prueba de Concepto Autor: Sastra Adi Wiguna Purple Elite Teaming Fecha de Investigación: Enero 2026 ID CVE:...

CVE-2026-47532

A flaw was found in nvidia-driver. A local user with administrative privileges can trigger an out-of-bounds write vulnerability in the driver's kernel mode layer. Successful exploitation may lead to arbitrary code execution, privilege escalation, data tampering, information disclosure, or a Denia...

CVE-2026-47547

A flaw was found in the NVIDIA GPU display driver firmware. Due to improper input validation, a local attacker with elevated privileges can send crafted input to the firmware. Successful exploitation may lead to arbitrary code execution, privilege escalation, or a denial of service DoS...

CVE-2026-47543

A flaw was found in nvidia-driver. The driver's kernel mode layer fails to properly validate input, allowing a local attacker with administrative privileges to supply crafted input. Successful exploitation can lead to arbitrary code execution, privilege escalation, denial of service DoS,...

CVE-2026-47542

A flaw was found in the NVIDIA GPU display driver. A local attacker with high privileges can trigger this vulnerability by supplying crafted input to the kernel-mode driver layer due to improper input validation. A successful exploit may allow the attacker to achieve arbitrary code execution,...

CVE-2026-47538

A flaw was found in the NVIDIA GPU display driver. A local attacker with elevated privileges can trigger an out-of-bounds write vulnerability within the device firmware. Successful exploitation could allow the attacker to execute arbitrary code, escalate privileges, cause a denial of service DoS,...

CVE-2026-47522

A flaw was found in the NVIDIA GPU display driver. Improper input validation within the kernel mode layer allows an authenticated local attacker with elevated privileges to trigger unintended behavior. A successful exploit may lead to arbitrary code execution, denial of service DoS, privilege...

EUVD-2026-91006

A stack-based buffer overflow vulnerability exists in the TDDPv2 service /usr/bin/tddp on Deco M9 Plus due to insufficient validation of decrypted request data length before it is copied into a fixed-size stack buffer in the subtype 0x91 handler. Successful exploitation may allow an adjacent,...

CVE-2026-8618

A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on the Deco M9 Plus . The root cause is insufficient validation of the length of decrypted request data before it is copied into a fixed-size stack buffer within the subtype 0x91 handler . An adjacent, unauth...

CVE-2026-20841-PoC

CVE-2026-20841-PoC Prueba de concepto para CVE-2026-20841 CVE-2026-20841 – Detalles CVE-2026-20841 es una vulnerabilidad que afecta al Bloc de notas de Microsoft, donde una entrada especialmente diseñada puede desencadenar la ejecución no deseada de comandos. El problema ocurre debido al manejo...

CVE-2026-0848-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-0848 Scanner Herramienta de detección para la vulnerabilidad CVE-2026-0848 en NLTK ejecución de código arbitrario en StanfordSegmenter. ⚡ Instalación git clone https://github.com/tu-usuario/CVE-2026-0848-Scanner.git cd CVE-2026-0848-Scanner pip install -r requirements.txt...

cve-2022-42889-text4shell

Install maven - maven-linux 1. Maven install to create the fat jar mvn clean install 2. Docker build docker build --tag=text4shell . 3. Docker run docker run -p 80:8080 text4shell 4. Test the app http://localhost/text4shell/attack?search= 5. Attack can be performed by passing a string...

CVE-2026-47574

A flaw was found in the NVIDIA Virtual GPU vGPU Manager for Linux. A local user with basic privileges can exploit an incorrect transfer of resources across isolation spheres. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, cause a denial of service...

CVE-2026-47563

A flaw was found in xorg-x11-drv-nvidia. A local user can trigger an invalid memory access NULL pointer dereference in the driver's kernel mode layer. A successful exploit could allow an attacker to execute arbitrary code with elevated system privileges, access sensitive information, or cause a...

[SECURITY] [DSA 6535-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6535-1 [email protected] https://www.debian.org/security/ Andres Salomon October 01, 2026 https://www.debian.org/security/faq -...

CVE-2026-23947-PoC

Walkthrough: CVE-2026-23947 - Ejecución de Código Arbitrario en Orval Este walkthrough demuestra cómo una especificación OpenAPI no confiable puede explotar Orval para inyectar código arbitrario en los clientes generados mediante los campos x-enumDescriptions y x-enumNames. Requisitos previos...

CVE-2025-60595

CVE-2025-60595 SPH Engineering UgCS 5.13.0 es vulnerable a la ejecución arbitraria de código. Esta es la referencia pública que se utilizará en el sitio de CVE. ¡Ejecución arbitraria de código en el producto propiedad de SPH Engineering. UGCS 5.13.0! Ardupilot/mavparse.py, líneas directas 230 "24...