514593 matches found
CVE-2026-64638
CVE-2026-64638 // XSS2Shell Analisi tecnica e matrice di mitigazione difensiva per il vettore CVE-2026-64638 XSS2Shell, un'inconsistenza critica nel parsing della schermata di autenticazione di WordPress Core che consente di concatenare un Cross-Site Scripting XSS riflesso pre-autenticazione con...
EUVD-2026-65592
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...
CVE-2026-64203 Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...
CVE-2026-64203
CVE-2026-64203 is a memory corruption vulnerability (specifically an out-of-bounds read ) in NI LabVIEW triggered when loading a VI. Successful exploitation requires an attacker to get a user to open a specially crafted VI , which may lead to information disclosure or arbitrary code execution . T...
UltraRealy_with_CVE-2019-1040
UltraRelay aggiornato da Lazaar Sami per l'exploit CVE-2019-1040 UltraRelay è uno strumento per l'avvelenamento LLMNR e il relay delle credenziali NTLM. Si basa su Responder e impack. Ho aggiornato la versione originale https://github.com/5alt/ultrarelay per l'exploit CVE-2019-1040. Dirk-jan...
EUVD-2026-65591
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...
CVE-2026-64202
CVE-2026-64202 is an out-of-bounds read memory corruption vulnerability in NI LabVIEW triggered when loading a VI (Virtual Instrument) file. Successful exploitation requires a user to open a specially crafted VI , making it a local attack with required user interaction. The impact ranges from inf...
CVE-2024-47176
PoC: Unauthenticated RCE auf cups-browsed 📜 Schwachstelleninformationen...
EUVD-2026-65590
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...
CVE-2026-64201 Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...
CVE-2026-64201
CVE-2026-64201 is a memory corruption vulnerability, specifically an out-of-bounds read , in NI LabVIEW versions 2026 Q3 (26.3.0) and prior. The flaw is triggered when a user opens or loads a specially crafted VI file , which can lead to information disclosure or arbitrary code execution . The at...
CVE-2026-16234 Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...
CVE-2026-16234
CVE-2026-16234 is a memory corruption vulnerability — specifically an Out-of-Bounds Read — in NI LabVIEW triggered when loading a specially crafted VI. Successful exploitation requires user interaction (opening the malicious file), with no prior privileges needed. The flaw can lead to information...
EUVD-2026-65586
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...
EUVD-2026-65585
Webkul QloApps does not perform proper validation on uploaded file extensions or MIME types before moving the file to a publicly accessible directory. A remote, authenticated attacker with administrative privileges could upload executable files and achieve remote code execution. Fixed in 153ec1c...
CVE-2026-75496
Webkul QloApps contains an improper file upload validation flaw. The application fails to properly validate uploaded file extensions or MIME types before moving the file to a publicly accessible directory . A remote, authenticated attacker with administrative privileges can exploit this by upload...
CVE-2026-16233 Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...
CVE-2026-16233
CVE-2026-16233 is an out-of-bounds write memory corruption vulnerability in NI LabVIEW triggered when loading a specially crafted VI file. Successful exploitation requires local access and user interaction (opening the malicious VI), but no prior privileges. The impact ranges from information dis...
EUVD-2026-65582
There is a memory corruption vulnerability recently discovered in NI LabVIEW that may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2026 Q3 26.3.0 and...
browse-mcp has an arbitrary file write via unconfined download and state paths
Impact browserdownload wrote a fetched file to joinsavedir, filename with no validation of savedir, and browsersavestate / browserloadstate honored an explicit path unchanged. The MCP caller controls these arguments a malicious MCP client, or an autonomous agent steered by indirect prompt injecti...