CVE-2026-62429

Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchronized with its retrieval by a device model controlling the guest...

CVE-2026-13869

An use after free flaw was found in the Device component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497610642...

CVE-2026-13921

An insufficient validation of untrusted input flaw was found in the DeviceBoundSessionCredentials component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511738175...

CVE-2026-64245

A flaw was found in the Linux kernel's framebuffer device fbdev subsystem. Specifically, within the fbfindmode function, a use-after-free UAF vulnerability exists. This occurs because a memory buffer is released while still being referenced, potentially allowing an attacker to access or manipulat...

CVE-2026-62433

The Xen hypervisor is vulnerable to an issue where parts of the DM_OP handling code fail to verify that the caller provided the required number of buffers for a given operation. This lack of checking can cause certain operations to access uninitialized stack rubbish . Practical consequences of th...

CVE-2026-62433

Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized...

CVE-2026-62429 vNUMA domain cleanup may race other operations

Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchronized with its retrieval by a device model controlling the guest...

CVE-2026-62429

Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchronized with its retrieval by a device model controlling the guest...

CVE-2026-62429

The Xen hypervisor is vulnerable to a race condition where vNUMA domain cleanup is not synchronized with its retrieval by a device model controlling a guest. This allows access to vNUMA configuration data of a guest even after domain destruction has commenced. Impact includes potential privilege ...

CVE-2026-62429

Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchronized with its retrieval by a device model controlling the guest...

CVE-2026-14055

An insufficient validation of untrusted input flaw was found in the Device Trust component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501857663...

CVE-2026-64236

A flaw was found in the i2c davinci driver of the Linux kernel. When the 'clock-frequency' property is missing from the device tree, the driver's fallback mechanism can lead to a division-by-zero error. This vulnerability can be triggered by a local attacker providing a malformed device tree,...

vNUMA domain cleanup may race other operations

ISSUE DESCRIPTION Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchronized with its retrieval by a device model controlling the guest. IMPACT While Denial of Service DoS...

CVE-2026-64244

A flaw was found in the Linux kernel's memory management. This vulnerability occurs when a memory block fails to register, but its associated memory map is not properly cleared during device removal. This can lead to a system warning and potential instability or a kernel crash, allowing a local...

PTC ThingWorx - Panel Detection

PTC ThingWorx is an Industrial IoT IIoT platform for building and deploying connected industrial applications, machine monitoring, and remote service solutions. Exposed instances may provide unauthenticated access to IIoT dashboards and connected device management interfaces. !/usr/bin/env python...

Allied Telesis Device GUI Login Panel - Detect

Allied Telesis Device GUI login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Allied Telesis Device GUI login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Allied Telesis Devi...

CVE-2026-11841

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

Root-My-Device-Payloads

Root My Device Payloads A fork of BuSung-dev/Root-My-Galaxy-...

CVE-2026-11841 CVE-2026-11841

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...

CVE-2026-11841 CVE-2026-11841

An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access witho...