CVE-2026-88066

Claude Desktop on Windows versions prior to 1.8089.0 is vulnerable to arbitrary code execution due to an uncontrolled search path issue. The application invokes git.exe using uv_spawn without specifying an absolute path, which allows Windows to resolve a malicious git.exe binary located in the cu...

CVE-2026-121071

creationtimestamp| type| source ---|---|--- 2026-11-03 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20261104 2026-11-03 21:15:49+00:00| seen| https://infosec.exchange/users/cve/statuses/117554580606442564 2026-11-03 23:10:04+00:00| seen|...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

EUVD-2026-116200

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-95723 Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-95723

A missing integrity verification vulnerability exists in the Virtual Intranet Access (VIA) client . This flaw could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system. No specific exploit links or patch versions are provided...

EUVD-2026-116167

A missing integrity verification vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system...

CVE-2026-95749

A missing integrity verification vulnerability exists in HPE Networking Fabric Composer . Successful exploitation by an unauthenticated remote attacker could lead to arbitrary code execution on the affected system. No specific affected versions, root cause details, or remediation steps are provid...

CVE-2026-95733 Use of Hardcoded Credentials in HPE Networking Fabric Composer Could Allow Adjacent Arbitrary Code Execution

A vulnerability exists in a component of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system...

EUVD-2026-116277

A vulnerability exists in a component of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system...

CVE-2026-95733

A vulnerability exists in a component of HPE Networking Fabric Composer caused by the use of hardcoded credentials . Successful exploitation by an unauthenticated adjacent attacker could allow for arbitrary code execution on the affected system. The vulnerability is characterized by a CRITICAL ba...

CVE-2026-95732 Authentication Bypass in HPE Networking Fabric Composer allows Arbitrary Code Execution

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system...

EUVD-2026-116276

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system...

CVE-2026-95732

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer . This flaw could allow an unauthenticated adjacent attacker to achieve arbitrary code execution on the affected system. No specific root cause, affected versions, or remediation ste...

CVE-2026-63395 isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's git.checkout writes new child paths through symlinked leading directory components without checking them. A malicious repository can first place a directory symlink and later...

CVE-2026-63395

The isomorphic-git library (prior to version 1.38.6 ) is vulnerable to arbitrary host file writes and potential code execution. The git.checkout function fails to validate leading directory components, allowing a malicious repository to use a directory symlink to write files outside the intended ...

CVE-2026-63395 isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's git.checkout writes new child paths through symlinked leading directory components without checking them. A malicious repository can first place a directory symlink and later...

EUVD-2026-116274

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's git.checkout writes new child paths through symlinked leading directory components without checking them. A malicious repository can first place a directory symlink and later...

CVE-2026-63478

The isomorphic-git library (a JavaScript implementation of Git for Node.js and browsers) contains a path traversal vulnerability in its tree parser located at src/models/GitTree.js. Prior to version 1.38.6 , the parser accepts a standalone .. tree-entry name because it only rejects path separator...

CVE-2026-63478 isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's tree parser in src/models/GitTree.js accepts a standalone .. tree-entry name because it rejects only path separators. During clone or checkout from a malicious or...