87674 matches found
CVE-2026-57035
This vulnerability affects Android (Pixel) devices, as referenced by the 2026-09-01 Pixel security bulletin . The root cause is a missing bounds check in multiple locations, leading to an out-of-bounds write . The impact is a local escalation of privilege , requiring System execution privileges a...
CVE-2026-56989
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-56972
In multiple locations, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-56970
CVE-2026-56970 is a permission bypass vulnerability in Android (Pixel) devices, caused by a missing permission check in multiple locations. It enables local escalation of privilege with no additional execution privileges required and no user interaction. The CVSS 3.1 score is 7.8 (HIGH) with impa...
CVE-2026-48208
CVE-2026-48208 This is POC repo for CVE-2026-48208...
CVE-2026-55332
CVE-2026-55332 is an out-of-bounds write vulnerability in multiple locations within Android (referenced in the Pixel September 2026 security bulletin), caused by improper input validation . It allows local escalation of privilege but requires System-level execution privileges and needs no user in...
CVE-2026-55318
In multiple locations, there is a possible use-after-free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-0171
CVE-2026-0171 is an out-of-bounds write in the BigWave component of Google Pixel devices, caused by a logic error in the code. The vulnerability can lead to remote code execution (classified as EoP/High severity in the Pixel bulletin) with only low privileges required and no user interaction need...
CVE-2026-9082-PoC
python3 poc.py https://target.com...
Moderate: Red Hat Security Advisory: rsyslog security update
An update for rsyslog is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2026-48188
CVE-2026-48188 This is POC repo for CVE-2026-48188...
CVE-2026-91931
creationtimestamp| type| source ---|---|--- 2026-09-15 18:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvl7uvxvx225...
CVE-2026-89026
creationtimestamp| type| source ---|---|--- 2026-09-15 18:08:59+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvl7sxnjy62j 2026-09-15 18:20:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlagwcy572w 2026-09-16 13:16:18+00:00| seen|...
CVE-2026-91988
creationtimestamp| type| source ---|---|--- 2026-09-15 18:00:09+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvl7d5q3rg2p 2026-09-15 18:08:07+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvl7rf63nj2b 2026-09-16 05:30:04+00:00| seen|...
npm-tar-path-traversal-scanner
CVE-2026-31802 — npm tar Path Traversal Scanner Detects npm packages vulnerable to CVE-2026-31802 , a path traversal vulnerability in the tar npm package that allows arbitrary file writes during archive extraction. Features Scans package-lock.json for vulnerable tar versions Checks nodemodules fo...
CVE-2026-44848-PoC
CVE-2026-44848 — Portainer: Missing Authorization on Docker Plugin Endpoints → Host RCE Proof-of-concept for CVE-2026-44848 , a missing-authentication CWE-862 vulnerability in Portainer that lets a non-admin user with Docker endpoint access perform privileged Docker plugin operations → full host...
Dirty-Frag-CVE-2026-43284
DirtyFrag CVE-2026-43284 - Lab Detection Exercise Report Classification: Internal Lab - CyberLAB Date: 24 May 2026 Platform: Elastic Stack v9.4.1 Status: Detection Confirmed Table of Contents A - Executive Summary B - Full Findings Report 1. Objective and Threat Model 2. Vulnerability Background...
ROOT-APP-GOBINARY-CVE-2026-43871 CVE-2026-43871 in github.com/apache/thrift - Patched by Root
Root has patched CVE-2026-43871 in the github.com/apache/thrift package for Root:Go. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-41720 CVE-2026-41720 in org.springframework.ldap:spring-ldap-core - Patched by Root
Root has patched CVE-2026-41720 in the org.springframework.ldap:spring-ldap-core package for Root:Maven. Multiple fixed versions available...