59 matches found
DEBIAN-CVE-2026-9080
Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...
BELL-CVE-2026-9080
Bulletin has no description...
libcurl 8.13.0 < 8.21.0 Use-After-Free in Socket Callback
The version of libcurl installed on the remote host is 8.13.0 prior to 8.21.0. It is, therefore, affected by a use-after-free vulnerability: - Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability. CVE-2026-9080 Note that Nessus has n...
curl: UAF read in mev_pollset_diff() trace path after curl_easy_pause() in socket callback
Summary: The CVE-2026-9080 fix re-fetches the shentry after the socket callback inside mevshentryupdate, because curleasypause called from that callback re-enters mevassess and can free the entry. The same re-fetch was not applied at the caller, mevpollsetdiff, which dereferences its own entry...
UBUNTU-CVE-2026-9080
Calling curleasypause within the event-based CURLMOPTSOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed...
EUVD-2020-29909
Malware in sbrugna...
MAL-2025-9080 Malicious code in @malware-test-yield-kauri-kaama-lezes/test-mlw3-yield-kauri-kaama-lezes (npm)
The package @malware-test-yield-kauri-kaama-lezes/test-mlw3-yield-kauri-kaama-lezes was found to contain malicious code...
Oracle Linux 9 : kernel (ELSA-2025-9080)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-9080 advisory. - Bluetooth: L2CAP: Fix corrupted list in hcichandel David Marlin RHEL-87890 CVE-2025-21969 - Bluetooth: L2CAP: Fix slab-use-after-free Read in...
CVE-2020-9080
There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. Vulnerability ID: HWPSIRT-2020-05272 This vulnerabilit...
CVE-2020-9080
There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. Vulnerability ID: HWPSIRT-2020-05272 This vulnerabilit...
CVE-2020-9080
creationtimestamp| type| source ---|---|--- 2024-12-27 09:28:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113724076412434486 2024-12-27 10:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lebqz4hnkn2o 2024-12-27 11:48:45+00:00| seen|...
CVE-2020-9080
CVE-2020-9080 affects Huawei smartphone products. The issue is an improper privilege management vulnerability allowing a local, authenticated attacker to craft specific input to achieve local privilege escalation. CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, LOW...
CVE-2024-9080
creationtimestamp| type| source ---|---|--- 2024-09-22 10:12:57+00:00| seen| https://t.me/cvedetector/6154...
CVE-2024-9080 code-projects Student Record System pincode-verification.php sql injection
A vulnerability was found in code-projects Student Record System 1.0. It has been classified as critical. Affected is an unknown function of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. It is possible to launch the attack remotely. The explo...
CVE-2024-9080 code-projects Student Record System pincode-verification.php sql injection
A vulnerability was found in code-projects Student Record System 1.0. It has been classified as critical. Affected is an unknown function of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. It is possible to launch the attack remotely. The explo...
SurgeNews User Credentials
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SurgeNews User Credentials', 'Description' = %q This module exploits a vulnerability in the WebNews web interface of SurgeNews on TCP ports 9080...
RHEL 9 : thunderbird (RHSA-2022:9080)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:9080 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.6.0. Security Fixes: Mozilla:...
Oracle Linux 9 : ELSA-2022-9080-1: / thunderbird (ELSA-2022-90801)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-90801 advisory. 102.6.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 102.6.0-2 - Update to 102.6.0 build2 102.6.0-1 -...