234142 matches found
CVE-2025-66837
CVE-2025-66837 Malicious File Upload Description A file upload vulnerability in ARIS allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware CVSS Score: 6.8 Medium Attack Type Remote Authenticated Affected Versions Versions before 10.0.23.0.3587512 Discovered By: Yazan...
CVE-2024-44346
CVE Disclosure: CVE-2024-44346 Date: 13-09-2024 Summary A vulnerability was identified in Tosibox tbsetup.exe version 4.0.0.0 , which could allow local privilege escalation . This issue has been assigned the identifier CVE-2024-44346 .The vendor has released an advisory with further details and...
CVE-2024-10930
CVE Disclosure: CVE-2024-10930 Public Disclosure of CVE-2024-10930 Date: 12-02-2025 Summary A vulnerability was identified in Carrier product E20-BLK416X.EXE version 4.16, which could allow local privilege escalation. This issue has been assigned the identifier CVE-2024-10930 .The vendor will...
CVE-2023-46980
CVE-2023-46980 An issue in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the userID parameter. Additional Information Video POC Link On YT ; https://youtu.be/3Mz2lSElg7Y Vulnerability Type Incorrect Access...
cve-2024-10914-port
CVE-2024-10914 ported to rust and python because why not what is this cve-2024-10914 is a recently discovered 9.8 critical score vulnerability that affects some dlink routers. because those routers reached their eol support, dlink refuses to patch this vulnerability because "stop being poor and...
CVE-2026-103680
A heap-based buffer overflow exists in the tnef component within the find_free_number() function. The vulnerability occurs during the generation of numbered backup suffixes for duplicate filenames when numbered backups are enabled and file overwriting is disabled. An attacker can trigger this by ...
CVE-2026-103680 Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation
A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...
kernel: tipc: fix double-free in tipc_buf_append()
A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. This vulnerability, a double-free, occurs when the tipcbufappend function incorrectly handles memory after a socket buffer skb reallocation. An attacker could potentially exploit this to cause system...
kernel: netfilter: flowtable: publish GC-visible tuple last
A flaw was found in the netfilter flowtable component of the Linux kernel. This vulnerability occurs due to a timing issue where the system's garbage collection can free a network flow while it is still being set up. This can lead to a 'use-after-free' condition, where the system attempts to acce...
Vulnerability hidden in Apple CoreGraphics
Apple has identified a vulnerability in CoreGraphics on iOS, iPadOS, and macOS. This vulnerability involves an out-of-bounds write operation within the CoreGraphics component. An attacker can exploit this vulnerability by processing specially crafted files, which may lead to the execution of...
gvfs: SFTP: heap-based buffer overflow in read_reply()
A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply to process a length that exceeds the size requested by the client. The function does not verify the server-provided length against the allocated buffer size, causing...
CVE-2026-102317
A flaw was found in chromium-browser. An improper privilege management issue exists within the Mojo inter-process communication IPC framework. A local attacker could exploit this flaw by running a crafted local program to bypass the browser's sandbox security boundary. Successful exploitation cou...
CVE-2025-69599
CVE-2025-69599 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200965 rvia in Raynet is vulnerable to an Uncontrolled Search Path Element issue. When loading shared objects and calling...
CVE-2026-103531
A flaw was found in OpenSC. A stack-based buffer overflow vulnerability exists in the SetCOS smart card driver during the handling of file control information in the setcosconstructfci44 function. By supplying manipulated card attributes, an attacker could trigger memory corruption, potentially...
CVE-2026-48778-PoC
CVE-2026-48778 — Notepad++ Arbitrary Code Execution PoC Severity: High CVSS 7.8 | Affected: Notepad++ ≤ 8.9.6 | Patched: v8.9.6.1 A PoC script for CVE-2026-48778, an arbitrary code execution vulnerability in Notepad++ ≤ 8.9.6. For full technical details, see the official security advisory. Usage...
CVE-2026-48800-PoC
CVE-2026-48800 — Notepad++ Arbitrary Code Execution PoC Severity: High | Affected: Notepad++ ≤ 8.9.6 | Patched: v8.9.6.1 A PoC script for CVE-2026-48800, an arbitrary code execution vulnerability in Notepad++ ≤ 8.9.6 via shortcuts.xml. For full technical details, see the official security advisor...
CVE-2026-76147
A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...
EUVD-2026-90489
A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...
CLEANSTART-2026-OK73778 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass
Security vulnerability affects the kube-state-metrics-fips package. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...