Lucene search
+L

10730 matches found

Positive Technologies
Positive Technologies
•added 2026/02/10 12:00 a.m.•46 views

PT-2026-7312

Name of the Vulnerable Software and Affected Versions IntelR NPU Drivers affected versions not specified Description An improper conditions check in some firmware for IntelR NPU Drivers within Ring 1 may allow a denial of service. An unprivileged software adversary with an authenticated user and ...

5.7CVSS5.3AI score0.00101EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/10 12:00 a.m.•28 views

Intel Graphics Drivers和Intel LTS kernels 代码问题漏洞

Intel Graphics Drivers and Intel LTS kernels are products of the American company Intel. Intel Graphics Drivers are driver programs for integrated graphics cards. Intel LTS kernels are versions of the Linux kernel. Both Intel Graphics Drivers and Intel LTS kernels have code vulnerabilities that...

2.8CVSS5.8AI score0.00099EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/10 12:00 a.m.•25 views

PT-2026-7309

Name of the Vulnerable Software and Affected Versions IntelR NPU Drivers affected versions not specified Description A flaw exists in some firmware for IntelR NPU Drivers within Ring 1, potentially leading to a denial of service. An unprivileged software attacker with an authenticated user accoun...

6.8CVSS5.2AI score0.00115EPSS
SaveExploits0References3
Intel
Intel
•added 2026/02/10 12:00 a.m.•32 views

Intel® NPU Driver Advisory

Summary: Potential security vulnerabilities for some Intel® NPU Drivers may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-32735 Description: Improper conditions check in...

6.8CVSS5.9AI score0.00164EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/02/09 11:21 p.m.•10 views

@cubejs-backend/server (>=1.1.0, <=1.4.0), @cubejs-backend/server-core (>=1.1.0, <=1.4.0) +2 more potentially affected by CVE-2026-25958 via @cubejs-backend/api-gateway (>=1.1.0, <=1.4.0)

@cubejs-backend/api-gateway NPM version =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.4.0 - cubejs-backend-server-core-fork 1.1.3 Source cves: CVE-2026-25958 Source advisory: SNYK:JS-CUBEJSBACKENDAPIGATEWAY-15265447...

7.7CVSS5.8AI score0.00441EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2026/02/08 12:06 a.m.•276 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Iolo System_Shield

VulnDrivers-n-LOLDrivers-POCs List of POCs I have done for som...

10CVSS8.3AI score0.18455EPSS
SaveExploits8
RedhatCVE
RedhatCVE
•added 2026/02/07 7:30 p.m.•16 views

CVE-2026-25752

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. An authorization bypass vulnerability in FUXA allows an unauthenticated, remote attacker to modify device tags via WebSockets. Exploitation allows an unauthenticated, remote attacker to bypass role-based access controls and...

9.3CVSS6.1AI score0.00738EPSS
SaveExploits0References1
osv-osv
osv-osv
•added 2026/02/07 12:03 a.m.•13 views

OSV-2026-205 UNKNOWN READ in gpsd_poll

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=481932457 Crash type: UNKNOWN READ Crash state: gpsdpoll FuzzDrivers.c...

5.3AI score
SaveExploits0References1
NVD
NVD
•added 2026/02/06 7:16 p.m.•26 views

CVE-2026-25752

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. An authorization bypass vulnerability in FUXA allows an unauthenticated, remote attacker to modify device tags via WebSockets. Exploitation allows an unauthenticated, remote attacker to bypass role-based access controls and...

9.3CVSS0.00738EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/02/06 7:05 p.m.•25 views

EUVD-2026-5620

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. An authorization bypass vulnerability in FUXA allows an unauthenticated, remote attacker to modify device tags via WebSockets. Exploitation allows an unauthenticated, remote attacker to bypass role-based access controls and...

9.3CVSS6.1AI score0.00738EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/06 7:05 p.m.•16 views

CVE-2026-25752

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. An authorization bypass vulnerability in FUXA allows an unauthenticated, remote attacker to modify device tags via WebSockets. Exploitation allows an unauthenticated, remote attacker to bypass role-based access controls and...

9.3CVSS6.1AI score0.00738EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/02/06 7:05 p.m.•59 views

CVE-2026-25752 FUXA Unauthenticated Remote Arbitrary Device Tag Write

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. An authorization bypass vulnerability in FUXA allows an unauthenticated, remote attacker to modify device tags via WebSockets. Exploitation allows an unauthenticated, remote attacker to bypass role-based access controls and...

9.3CVSS0.00738EPSS
SaveExploits0References2
OSV
OSV
•added 2026/02/05 7:23 p.m.•19 views

USN-7988-3 linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; - NVME drivers; - File systems infrastructure; - Timer subsystem; - Memory management; - Packet...

7.8CVSS6.5AI score0.00289EPSS
SaveExploits0References8
Ubuntu
Ubuntu
•added 2026/02/05 7:23 p.m.•24 views

USN-7988-3: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; - NVME drivers; - File systems infrastructure; - Timer subsystem; - Memory management; - Packet...

7.8CVSS6.5AI score0.00289EPSS
SaveExploits0
Snyk
Snyk
•added 2026/02/05 12:38 a.m.•14 views

Missing Authorization

Overview fuxa-server is a Web-based Process Visualization SCADA/HMI/Dashboard software Affected versions of this package are vulnerable to Missing Authorization via the WebSocket. An attacker can overwrite arbitrary device tags or disable communication drivers by sending crafted WebSocket message...

9.3CVSS5.9AI score0.00738EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/02/05 12:38 a.m.•23 views

FUXA Unauthenticated Remote Arbitrary Device Tag Write

Summary Description An authorization bypass vulnerability in FUXA allows an unauthenticated, remote attacker to modify device tags via WebSockets. This affects FUXA through version 1.2.9. This issue has been patched in FUXA version 1.2.10. Impact This affects all deployments, including those...

9.3CVSS6.1AI score0.00738EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
•added 2026/02/04 12:00 a.m.•23 views

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from drivers that do not support atomic operations when using null pointers, potentially leading to crashes ...

5.8AI score0.00182EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/04 12:00 a.m.•24 views

PT-2026-6278

Name of the Vulnerable Software and Affected Versions Alist versions prior to 3.57.0 Description Alist, a file list program powered by Gin and Solidjs, has a configuration issue where TLS certificate verification is disabled by default for all outgoing storage driver communications. This allows f...

9.1CVSS7.7AI score0.00253EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2026/02/02 12:00 a.m.•3 views

PT-2026-28897

Уязвимость модулей drivers/net/ethernet/google/gve/gve ethtool.c и drivers/net/ethernet/google/gve/gve main.c ядра операционной системы Linux связана с неправильным расчетом размера буфера. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

7.8CVSS5.8AI score0.0012EPSS
SaveExploits0References14
OSV
OSV
•added 2026/01/31 12:10 a.m.•14 views

OSV-2026-167 Use-of-uninitialized-value in aivdm_analyze

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=479564939 Crash type: Use-of-uninitialized-value Crash state: aivdmanalyze gpsdpoll FuzzDrivers.c...

5.9AI score
SaveExploits0References1
Rows per page
Query Builder