13 matches found
CVE-2026-40572
creationtimestamp| type| source ---|---|--- 2026-04-18 01:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116423119797929424 2026-04-18 01:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mjqc3fc2ov2p 2026-04-18 03:16:44+00:00| published-proof-of-concept|...
CVE-2026-40572
NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 15 MemoryMapRange allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions, including critical...
CVE-2026-40572
NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly. In versions prior to 0.24, Syscall 15 MemoryMapRange allows Ring 3 user-mode processes to map arbitrary virtual address ranges into their address space without validating against forbidden regions, including critical...
CVE-2023-40572
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The create action is vulnerable to a CSRF attack, allowing script and thus remote code execution when targeting a user with script/programming right, thus compromising the confidentiality,...
EUVD-2022-40572
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2021-40572
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmxfinalize function in reframeav1.c, which allows attackers to cause a denial of service...
MAL-2025-40572 Malicious code in yogcla (npm)
The package yogcla was found to contain malicious code...
CVE-2025-40572
creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16103 2025-05-13 10:52:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp2cxi7tx42o 2025-05-13 13:52:29+00:00| seen| https://t.me/cvedetector/25190 2025-05-15...
CVE-2023-40572
creationtimestamp| type| source ---|---|--- 2023-08-24 07:13:00+00:00| seen| https://t.me/cibsecurity/69108...
CVE-2023-40572 XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. The create action is vulnerable to a CSRF attack, allowing script and thus remote code execution when targeting a user with script/programming right, thus compromising the confidentiality,...
CVE-2021-40572
The binary MP4Box in Gpac 1.0.1 has a double-free bug in the av1dmxfinalize function in reframeav1.c, which allows attackers to cause a denial of service...
CVE-2021-40572
GPAC CVE-2021-40572 affects the MP4Box component in GPAC 1.0.1, with a double-free bug in av1dmx_finalize (reframe_av1.c) that can cause denial of service. Public details describe the vulnerability and some patch guidance: Debian reports fixes in GPAC 1.0.1+dfsg1-4+deb11u2; Gentoo GLSA recommends...