Microsoft Windows: CVE-2026-83698: Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83698: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83699: Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96948: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

PT-2026-113150

Name of the Vulnerable Software and Affected Versions Windows Client Side Caching driver csc.sys affected versions not specified Description An issue in the Windows Client Side Caching driver csc.sys allows an authorized attacker to locally disclose sensitive information. Recommendations At the...

PT-2026-112437

Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A heap-based buffer overflow in the Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally. A heap-based buffer...

PT-2026-112502

Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A heap-based buffer overflow in the Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally. A heap-based buffer...

PT-2026-112195

Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A heap-based buffer overflow in the Windows Client-Side Caching CSC Service allows an unauthorized attacker to elevate privileges over a network. A heap-based...

PT-2026-112503

Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A stack-based buffer overflow in the Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally. A stack-based buffer...

CVE-2026-85976 HTTP response splitting in Progress MarkLogic Server Query Console

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration endpoint, which could allow HTTP response splitting and unintended client-side response handling...

CVE-2026-85976: Improper Neutralization of CRLF Sequences in HTTP Headers

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sanitize input used by the Query Console file-exploration endpoint, which could allow HTTP response splitting and unintended client-side response handling...

PT-2026-110813

Name of the Vulnerable Software and Affected Versions Progress MarkLogic Server versions 12.x prior to 12.1.0 Progress MarkLogic Server versions 11.x prior to 11.3.7 Description Insufficient sanitization of input used by the Query Console file-exploration endpoint allows for HTTP response...

beef

Copyright c 2006-2026 Wade Alcorn - [email protected] Browser Exploitation Framework BeEF - https://beefproject.com Vedi il file 'doc/COPYING' per i permessi di copia =============================================================================== Cos'è BeEF? BeEF è l'acronimo di The Browser...

ppfuzz

ppfuzz Fuzzer de Contaminación de Prototipos Una herramienta rápida para escanear vulnerabilidades de contaminación de prototipos del lado del cliente escrita en Rust. 🦀 Instalación Binario Fuente Dependencias Demostración Uso Básico Opciones Uso Materiales de apoyo Contribuciones Atribución...

EUVD-2026-95893

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. Hayat Hospital Hayat Mobile allows Authentication Bypass. This issue affects Hayat Mobile: from 3.3.0 before 3.4.0...

CVE-2026-90983: Use of Client-Side Authentication

Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc. Hayat Hospital Hayat Mobile allows Authentication Bypass. This issue affects Hayat Mobile: from 3.3.0 before 3.4.0...

NPM: Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service

NPM: Quasar Framework: DOM Clobbering in Quasar openURL SafariViewController Integration Causes Client-Side Denial of Service vulnerability discovered by ? in WordPress Npm quasar versions = 2.32.1...

GHSA-89VP-X45C-52CQ Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service

Summary A DOM Clobbering vulnerability exists in Quasar's openURL utility when handling the iOS SafariViewController bridge. The vulnerable implementation only checks whether window.SafariViewController exists before invoking it as a native bridge object. An attacker who can inject HTML content...

Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service

Summary A DOM Clobbering vulnerability exists in Quasar's openURL utility when handling the iOS SafariViewController bridge. The vulnerable implementation only checks whether window.SafariViewController exists before invoking it as a native bridge object. An attacker who can inject HTML content...

CVE-2026-106101 Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.32.2, the openURL utility in ui/src/utils/open-url/open-url.js trusted window.SafariViewController whenever that global existed in an iOS environment. Attacker-controlled HTML rendered by components...