20 matches found
KB5073724: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (January 2026)
The remote Windows host is missing security update 5073724. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. CVE-2026-20857 - An issue was discovered in...
KB5073722: Windows 10 Version 1607 / Windows Server 2016 Security Update (January 2026)
The remote Windows host is missing security update 5073722. It is, therefore, affected by multiple vulnerabilities - An issue was discovered in Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 aka AGRSM64.sys. There is Local Privilege Escalation to SYSTEM via a Stack Overflow in...
KB5073455: Windows 11 version 23H2 Security Update (January 2026)
The remote Windows host is missing security update 5073455. It is, therefore, affected by multiple vulnerabilities - Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. CVE-2026-20857 - An issue was discovered in...
CVE-2023-31096
An issue was discovered in Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 aka AGRSM64.sys. There is Local Privilege Escalation to SYSTEM via a Stack Overflow in RTLCopyMemory IOCTL 0x1b2150. An attacker can exploit this to elevate privileges from a medium-integrity process to...
CVE-2022-31096
Discourse is an open source discussion platform. Under certain conditions, a logged in user can redeem an invite with an email that either doesn't match the invite's email or does not adhere to the email domain restriction of an invite link. The impact of this flaw is aggravated when the invite h...
CVE-2025-31096
creationtimestamp| type| source ---|---|--- 2025-03-28 10:28:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9310 2025-03-28 13:33:50+00:00| seen| https://t.me/cvedetector/21396...
CVE-2025-31096
CVE-2025-31096 affects WordPress PostX (Post Grid Gutenberg Blocks) plugin. The WordPress plugin PostX versions up to 4.1.25 are vulnerable to a Cross-Site Scripting (Stored) flaw via inputs generated during web page rendering, enabling XSS in authenticated contexts. Remediation: upgrade to PostX...
CVE-2024-31096
Cross-Site Request Forgery CSRF vulnerability in kopatheme Nictitate.This issue affects Nictitate: from n/a through 1.1.4...
CVE-2024-31096 WordPress Nictitate theme <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in kopatheme Nictitate.This issue affects Nictitate: from n/a through 1.1.4...
CVE-2024-31096 WordPress Nictitate theme <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in kopatheme Nictitate.This issue affects Nictitate: from n/a through 1.1.4...
CVE-2024-31096
Technical details about CVE-2024-31096 are not provided in the supplied documents. Monitor for updates.
WordPress Nictitate Theme <= 1.1.4 is vulnerable to Cross Site Request Forgery (CSRF)
Software Nictitate Type Theme Vulnerable versions = 1.1.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-31096 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 020cf5aa1ba2 Credits Dhabaleshwar Das Required...
CVE-2023-31096
creationtimestamp| type| source ---|---|--- 2023-10-10 22:17:05+00:00| seen| https://t.me/cibsecurity/72004 2026-01-13 18:01:16+00:00| seen| https://www.thezdi.com/blog/2026/1/13/the-january-2026-security-update-review 2026-01-13 18:04:32+00:00| seen|...
CVE-2023-31096
CVE-2023-31096 affects Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver (AGRSM64.sys) up to version 2.2.100.1, enabling Local Privilege Escalation to SYSTEM via a stack overflow in RTLCopyMemory (IOCTL 0x1b2150). The issue can bypass kernel protections (AV, PPL) and may be used in BYOVD ransomwar...
CVE-2022-31096
creationtimestamp| type| source ---|---|--- 2022-06-28 02:35:06+00:00| seen| https://t.me/cibsecurity/45252...
CVE-2022-31096
Discourse (open source discussion platform) has a vulnerability where a logged-in user can redeem an invite with an email that doesn’t match the invite or violates the invite’s email domain restriction, potentially leading to viewing content restricted to certain groups. The issue is worsened whe...
CVE-2022-31096 Invites restricted to an email or invite links restricted to an email domain may be bypassed by a under certain conditions in Discourse
Discourse is an open source discussion platform. Under certain conditions, a logged in user can redeem an invite with an email that either doesn't match the invite's email or does not adhere to the email domain restriction of an invite link. The impact of this flaw is aggravated when the invite h...
CVE-2022-31096 Invites restricted to an email or invite links restricted to an email domain may be bypassed by a under certain conditions in Discourse
Discourse is an open source discussion platform. Under certain conditions, a logged in user can redeem an invite with an email that either doesn't match the invite's email or does not adhere to the email domain restriction of an invite link. The impact of this flaw is aggravated when the invite h...