EUVD-2026-93789

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56952

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56952

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56952

A permission bypass vulnerability exists in the platform_msg_handler_init function within default_msg_handlers.c . The flaw is caused by a missing permission check , which could allow for a local escalation of privilege requiring System execution privileges . This vulnerability does not require u...

CVE-2026-0198

In ispdallowed of gemmsg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0198

In ispdallowed of gemmsg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-93784

In ispdallowed of gemmsg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0198

A permission bypass vulnerability exists in the is_pd_allowed function of gem_msg.c . The root cause is a missing permission check , which could allow for local information disclosure . Exploitation requires System execution privileges , and no user interaction is required. No specific remediatio...

EUVD-2026-93782

Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured device verification link by an authenticated victim...

CVE-2026-105485

Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured device verification link by an authenticated victim...

CVE-2026-105485

Authentication bypass OAuth device authorization flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured device verification link by an authenticated victim...

CVE-2026-105485

The Devolutions Server (version 2026.3.7.0 and earlier) is susceptible to an authentication bypass within the OAuth device authorization flow . A remote attacker can achieve full account takeover of an authenticated victim by replaying a captured device verification link . The vulnerability is ca...

CVE-2022-46638

CVE-2022-46638 Its about vulnerability of AppLock Ver.5.6.2, a popular android app trusted by more than 100 million users in over 150 countries. PoC Unlock the application protected by AppLock just by tap the back button multiple times. 1. Open the application was locked by AppLock. 2. Dont input...

EUVD-2026-93779

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL...

CVE-2026-9226

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL...

CVE-2026-9226

An authentication bypass vulnerability exists in the Azure AD external login flow of Devolutions Server version 2026.3.7.0 and earlier . A remote attacker can exploit this by capturing and replaying a login-session token exposed in a redirect URL, potentially leading to full account takeover . No...

CVE-2026-9226

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL...

CVE-2026-82329-PoC-Exploit

CVE‑2026‑82329 – JFrog Artifactory Auth Bypass Toolkit ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misuse A...

CVE-2025-99999

CVE-2025-99999 - HSM Firmware Authentication Bypass Description Critical authentication bypass in HSM Firmware v4.5.0 allowing key extraction. Affected Systems HSM Firmware v4.5.0 all builds Financial institutions using this HSM for SWIFT transaction signing IOCs IP| Port| Description ---|---|---...

CVE-2026-49975

CVE-2026-49975 HTTP/2 Bomb ★ CVE-2026-49975 HTTP/2 Bomb PoC ★ Overview CVE-2026-49975 is a Denial of Service DoS vulnerability in Apache HTTP Server. The vulnerability occurs in the HTTP/2 request handling path, where multiple cookie header fields can be merged without being properly counted...