283393 matches found
CVE-2024-3094-XZ-Backdoor-Detector
Description Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific...
CVE-2026-38698-and-CVE-2026-38699
Research on Wyze Cam Pan v3 Slides Reference CVE-2026-38698 Attack Name Heap Overflow on tutkpacketalloc function in tutkavserver Additional Details Afftected product TUTK SDK v.3.1.10.0 through v.4.3.8.1 Affected Component tutkpacketAlloc function Attack Vector An authenticated attacker must sen...
EUVD-2026-88734
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism...
CVE-2025-27591
Below - Local Privilege Escalation CVE-2025-27591 Below .log to any root-owned file like /etc/passwd. When below snapshot is executed with sudo, it forcibly sets mode 0666 on the log file and writes to itโeven if it's a symlink. This allows injection of a root-privileged user without password,...
dirtypipez-exploit
Exploit DirtyPipe CVE-2022-0847. Crรฉdito: Max Kellermann [email protected] Una nueva vulnerabilidad de Linux conocida como 'Dirty Pipe' permite a usuarios locales obtener privilegios de root a travรฉs de exploits disponibles pรบblicamente. Hoy, el investigador de seguridad Max Kellermann divul...
CVE-2026-97420
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When a BPF program modifies a system control sysctl parameter, the kernel fails to append a null-terminating byte to the replacement buffer. Downstream kernel parsers expecting a properly terminated string may read past...
CVE-2026-97418
A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture subsystem within the ESS AudioDrive ES18xx sound card driver. During mixer initialization, the driver fails to verify whether memory allocation for sound control structures succeeds before dereferencing the returned...
Blackash-CVE-2025-48593
๐จ CVE-2025-48593 Zero-Click Remote Code Execution in Android System ๐จ "A single malicious packet can own your device." โ Android Security Team, Nov 2025 ๐ฏ Vulnerability Snapshot Attribute| Details ---|--- CVE ID| CVE-2025-48593 Severity| ๐ด Critical RCE, Zero-Click CVSS Est.| 9.8 Pending NVD...
Amaranth-Project
Amaranth Project Utilize CVE-2025-8088 WinRAR path traversal vulnerability, โค 7.11 to implement a multi-stage backdoor implantation attack chain. ่ฏฑ้ฅตๆๆกฃ โ ๆถๆRAR โ CVE่งฆๅ โ ADSๅๅ ฅ โ Stagerๆง่ก โ ๆไปถๅ ่ฝฝ โ C2ไธ็บฟ Project Structure Directory| Content ---|--- Stage01Stage07/| Source code and test scripts for...
cve_2024_0044
CVE 2024 0044 CVE-2024-0044, identified in the createSessionInternal function of the PackageInstallerService.java file, is a high-severity vulnerability affecting Android versions 12 and 13. This vulnerability allows an attacker to perform a "run-as any app" attack, leading to local escalation of...
CVE-2026-76720
A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect...
CVE-2026-76719
A security vulnerability in HPE OneView may be exploited remotely to perform session hijacking, data theft or other unauthorized actions...
CVE-2026-102473
A flaw was found in dash. When built without libc fnmatch, the internal pmatch matcher implements by unbounded recursion over candidate positions. A local user who can plant filenames, or otherwise feed that matcher, can make a short multi-star pattern such as .....tar.gz consume excessive CPU...
CVE-2026-102474
A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, but the multi-byte token can need five or six bytes. A local user who can supply such an escape to dash printf or echo %b, including through dash -c and a positional argument, can write o...
CVE-2026-97589
A flaw was found in the Linux kernel's s390 cryptographic drivers. When handling asynchronous cryptographic operations, certain request callbacks incorrectly propagate error codes back to the crypto engine after already completing a request. This causes the crypto engine to mistakenly perform a...
CVE-2026-37149
CVE-2026-37149 SQL Injection in GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 Overview CVE ID: CVE-2026-37149 Vulnerability Type: SQL Injection CWE-89 Severity: High Discoverer: Dhyey Patel Description GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0...
EUVD-2026-88700
A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect...
CVE-2026-76720
A vulnerability exists in HPE OneView and HPE Synergy Composer (prior to v11.40 ) that can be remotely exploited to cause a URL redirect . This flaw also carries a potential risk of Cross-Site Scripting (XSS) . To resolve this vulnerability, HPE provides a software update; users should update to ...
