182656 matches found
EUVD-2026-79155
In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0194
CVE-2026-0194 is a local privilege escalation vulnerability in the Trusted Execution Environment (TEE) of Google Pixel devices, caused by an integer overflow that permits a permission bypass . No additional execution privileges or user interaction are required for exploitation. The Pixel Update B...
CVE-2026-0189
In acinitpolicy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-79153
In acinitpolicy of init.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0189
CVE-2026-0189 is a permission bypass in the ac_init_policy function of init.c within the Bootloader component of Google Pixel devices, caused by a logic error. It enables local escalation of privilege with no additional execution privileges and no user interaction required. The CVSS 3.1 score is ...
CVE-2026-0179
In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0179
CVE-2026-0179 is a Critical -severity elevation-of-privilege vulnerability in the Bootloader of Google Pixel devices, caused by a missing permission check that allows a local attacker with System execution privileges to bypass permissions. No user interaction is required. The vulnerability is tra...
Authentication Bypass
Apache CXF is vulnerable to Authentication Bypass. The vulnerability is due to insufficient validation of required claims in self-issued OIDC ID tokens, including issuer, subject, audience, time, and subjwk binding, which allows an attacker to craft malicious tokens and bypass authentication when...
EUVD-2026-79144
Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" permission, which was only checked after the file had been stored. A user denied that permission, or an unauthenticated visitor on a guest-postin...
Lumma-Stealer-dllhost-Hollowing-C2-Domains-Payload-Extraction-Analysis
1. Setup.exe – 隐私、驱动与内存字符串 对 setup.exe 投放器的 Process Hacker 内存分析显示，Lumma Stealer 针对隐私设置、安装驱动程序并管理内存。 观察到的关键字符串： Privacy Camera – 尝试访问或禁用摄像头隐私设置。 Privacy Microphone – 尝试访问或禁用麦克风隐私设置。 PreinstallDriver – 表明为持久化或规避而安装驱动程序。 MapMemoryB0000 – 内存映射操作（可能用于注入）。 为何重要： 隐私绕过： 该恶意软件可能禁用摄像头/麦克风隐私设置。 驱动程序安装：...
CVE-2020-1337
CVE-2020-1337 - Binary Planting CVE-2020-1048 bypass Peleg Hadar @peleghd y Tomer Bar de SafeBreach @safebreach fueron reconocidos por Microsoft mediante el CVE-2020-1048, una vulnerabilidad del Spooler de Windows que permite una elevación de privilegios en Windows 7 y posteriores. Algunos detall...
CVE-2026-57442
MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathFilter in src/pathfilter.ts uses root-anchored deny-list patterns, so nested .git, .obsidian, and nodemodules path segments do not match the restriction and pass both...
CVE-2026-57441
MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.4, PathFilter in src/pathfilter.ts compiles restricted-directory patterns case-sensitively and compares paths without canonicalizing filesystem-equivalent segment names. On...
CVE-2026-56829
Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.2, packages/admin/src/Livewire/Components/Products/VariantStock.php exposes stockAction without editproductvariants authorization and leaves public $variant client mutable because it lacks the Livewire Locked attribute. Any authenticated...
CVE-2026-54689
mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, the weburlread URL policy in src/url-reader.ts can be bypassed while MCPHTTPHARDEN is enabled and MCPHTTPALLOWPRIVATEURLS is not enabled because redirec...
CVE-2026-54547
Meta Ads MCP is a Model Context Protocol MCP server that lets AI assistants run Meta Ads. Prior to version 1.0.115, AuthInjectionMiddleware in metaadsmcp/core/httpauthintegration.py rejects HTTP MCP requests only when both authtoken and pipeboardtoken are absent, while extracttokenfromheaders doe...
CVE-2026-53459
Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Starting in version 0.1.6 and prior to version 0.2.4.4, a fail-open in the authentication code allows any attacker to bypass authentication by flooding a public endpoint to exhaust resources causing database...
CVE-2026-18115
Concrete CMS 9.2.0 to 9.5.2 did not enforce per-field edituserproperties permissions on the REST API user write endpoints PUT /ccm/api/1.0/users/uID and POST /ccm/api/1.0/users/uID/changepassword. A user with an update-scoped OAuth token and permission to edit only one non-sensitive field could...
CVE-2026-12910
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to bypass SAML SSO sign-in restrictions and authenticate without SSO due to missing...