EUVD-2026-91054

Out-of-bounds Write CWE-787 in the PEA archive extraction routine pea.pas, unpeaprocedure of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execute arbitrary code as the user running PeaZip. While...

CVE-2026-103484 pgvector buffer overflow in IVFFlat index build

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution...

CVE-2026-103484

A flaw in pgvector before version 0.8.7 allows an authenticated database user to trigger an out-of-bounds write during an Inverted File Flat (IVFFlat) index build operation. This vulnerability can lead to arbitrary code execution or a crash resulting in a denial of service on the database server....

EUVD-2026-91044

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution...

CVE-2026-103484

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution...

obsidian-note-toolbar-PoC

Выполнение произвольного кода через frontmatter в Note Toolbar посредством цепочки переменных propNAME → js: Статус CVE: запрошен, ожидает присвоения. Данная уязвимость опубликована как GHSA-q8cw-3m8c-5pf2. После присвоения CVE данный репозиторий будет переименован в...

CVE-2026-0303

Произвольное выполнение кода в Checkov CVE-2026-0303 CVE: CVE-2026-0303 | Базовая оценка CVSS: 6.3 | Уровень опасности: Низкий CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H CVE-2026-0303 — уязвимость произвольного выполнения кода в Checkov. Опубликовано Palo Alto Networks 9...

CVE-2026-8618

A stack-based buffer overflow vulnerability exists in the TDDPv2 service /usr/bin/tddp on Deco M9 Plus due to insufficient validation of decrypted request data length before it is copied into a fixed-size stack buffer in the subtype 0x91 handler. Successful exploitation may allow an adjacent,...

CVE-2026-7669-PoC

CVE-2026-7669 SGLang молча переопределяет trustremotecode=False на True и повторно вызывает AutoTokenizer.frompretrained всякий раз, когда transformers v5 возвращает объект TokenizersBackend. Модель с пользовательским tokenizerclass и automap, указывающим на tokenizer.py, достигает произвольного...

Pluck-CMS-Stored-XSS---Installation

Pluck CMS 4.7.18 Хранимый XSS Автор: Sergio Описание: Множественные уязвимости межсайтового скриптинга XSS при установке PluckCMS v.4.7.18 позволяют локальному злоумышленнику выполнить произвольный код с помощью специально созданной полезной нагрузки, внедряемой в параметры cont1 и cont2 в процес...

CVE-2024-44346

Divulgation CVE : CVE-2024-44346 Date: 13-09-2024 Résumé Une vulnérabilité a été identifiée dans Tosibox tbsetup.exe version 4.0.0.0 , qui pourrait permettre une élévation de privilèges locale . Ce problème a été assigné à l'identifiant CVE-2024-44346 .Le fournisseur a publié un avis avec plus de...

[SECURITY] [DSA 6536-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6536-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 01, 2026 https://www.debian.org/security/faq -...

cve-2025-59489

Инструмент обнаружения уязвимости Unity CVE-2025-59489 Автоматизированный инструмент обнаружения уязвимости внедрения в Unity Runtime для Android-игровых платформ. Обзор уязвимости CVE ID : CVE-2025-59489 Оценка CVSS : 8.4 High Затронутые версии : Android-приложения, созданные с Unity 2017.1 и...

CVE-2026-23744-Remote-Code-Execution-POC

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Proof Of Concept POC MCPJam inspector 3. Запустите эксплойт python3 exploit.py...

Dissecting-CVE-2026-0628-Chromium-Extension-Privilege-Escalation

= doi.org/10.5281/zenodo.18413764 = orcid.org/0009-0007-7728-256X README.md CVE-2026-0628: Повышение привилегий в Chromium WebView подмена источника – Техническое исследование и Proof-of-Concept Автор: Sastra Adi Wiguna Purple Elite Teaming Дата исследования: Январь 2026 ID CVE: CVE-2026-0628 CVS...

CVE-2026-47532

A flaw was found in nvidia-driver. A local user with administrative privileges can trigger an out-of-bounds write vulnerability in the driver's kernel mode layer. Successful exploitation may lead to arbitrary code execution, privilege escalation, data tampering, information disclosure, or a Denia...

CVE-2026-47547

A flaw was found in the NVIDIA GPU display driver firmware. Due to improper input validation, a local attacker with elevated privileges can send crafted input to the firmware. Successful exploitation may lead to arbitrary code execution, privilege escalation, or a denial of service DoS...

CVE-2026-47543

A flaw was found in nvidia-driver. The driver's kernel mode layer fails to properly validate input, allowing a local attacker with administrative privileges to supply crafted input. Successful exploitation can lead to arbitrary code execution, privilege escalation, denial of service DoS,...

CVE-2026-47542

A flaw was found in the NVIDIA GPU display driver. A local attacker with high privileges can trigger this vulnerability by supplying crafted input to the kernel-mode driver layer due to improper input validation. A successful exploit may allow the attacker to achieve arbitrary code execution,...

CVE-2026-47538

A flaw was found in the NVIDIA GPU display driver. A local attacker with elevated privileges can trigger an out-of-bounds write vulnerability within the device firmware. Successful exploitation could allow the attacker to execute arbitrary code, escalate privileges, cause a denial of service DoS,...