CVE-2026-54061

Dgraph is an open source distributed GraphQL database. Prior to version 25.3.5, Dgraph Alpha exposes the RPCs used for external snapshot import on the public gRPC port :9080 without authentication or authorization. As a result, an unauthenticated network client can open StreamExtSnapshot and send...

PT-2026-56423

Name of the Vulnerable Software and Affected Versions Dgraph versions prior to 25.3.5 Description Dgraph Alpha exposes privileged RPCs used for external snapshot import on the public gRPC port :9080 without authentication or authorization. An unauthenticated network client can access the...

CVE-2026-9080

creationtimestamp| type| source ---|---|--- 2026-07-03 09:52:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqblol6pi22 2026-07-03 21:37:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpriwslfl72k 2026-07-08 04:03:40+00:00| seen|...

DEBIAN-CVE-2026-9080

Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...

BELL-CVE-2026-9080

Bulletin has no description...

libcurl 8.13.0 < 8.21.0 Use-After-Free in Socket Callback

The version of libcurl installed on the remote host is 8.13.0 prior to 8.21.0. It is, therefore, affected by a use-after-free vulnerability: - Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability. CVE-2026-9080 Note that Nessus has n...

curl: UAF read in mev_pollset_diff() trace path after curl_easy_pause() in socket callback

Summary: The CVE-2026-9080 fix re-fetches the shentry after the socket callback inside mevshentryupdate, because curleasypause called from that callback re-enters mevassess and can free the entry. The same re-fetch was not applied at the caller, mevpollsetdiff, which dereferences its own entry...

UBUNTU-CVE-2026-9080

Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...

EUVD-2020-29909

Malware in sbrugna...

MAL-2025-9080 Malicious code in @malware-test-yield-kauri-kaama-lezes/test-mlw3-yield-kauri-kaama-lezes (npm)

The package @malware-test-yield-kauri-kaama-lezes/test-mlw3-yield-kauri-kaama-lezes was found to contain malicious code...

Oracle Linux 9 : kernel (ELSA-2025-9080)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9080 advisory. - Bluetooth: L2CAP: Fix corrupted list in hcichandel David Marlin RHEL-87890 CVE-2025-21969 - Bluetooth: L2CAP: Fix slab-use-after-free Read in...

CVE-2020-9080

There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. Vulnerability ID: HWPSIRT-2020-05272 This vulnerabilit...

CVE-2020-9080

There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. Vulnerability ID: HWPSIRT-2020-05272 This vulnerabilit...

CVE-2020-9080

creationtimestamp| type| source ---|---|--- 2024-12-27 09:28:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113724076412434486 2024-12-27 10:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lebqz4hnkn2o 2024-12-27 11:48:45+00:00| seen|...

CVE-2020-9080

CVE-2020-9080 affects Huawei smartphone products. The issue is an improper privilege management vulnerability allowing a local, authenticated attacker to craft specific input to achieve local privilege escalation. CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW...

CVE-2024-9080

creationtimestamp| type| source ---|---|--- 2024-09-22 10:12:57+00:00| seen| https://t.me/cvedetector/6154...

CVE-2024-9080 code-projects Student Record System pincode-verification.php sql injection

A vulnerability was found in code-projects Student Record System 1.0. It has been classified as critical. Affected is an unknown function of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. It is possible to launch the attack remotely. The explo...

CVE-2024-9080 code-projects Student Record System pincode-verification.php sql injection

A vulnerability was found in code-projects Student Record System 1.0. It has been classified as critical. Affected is an unknown function of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. It is possible to launch the attack remotely. The explo...

SurgeNews User Credentials

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SurgeNews User Credentials', 'Description' = %q This module exploits a vulnerability in the WebNews web interface of SurgeNews on TCP ports 9080...

RHEL 9 : thunderbird (RHSA-2022:9080)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:9080 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.6.0. Security Fixes: Mozilla:...