231629 matches found
PT-2026-64794
Name of the Vulnerable Software and Affected Versions ananocoai NanoClaw versions prior to 2.0.65 Description A flaw in the add mcp server component allows for improper authorization via remote manipulation. The issue resides within the handleAddMcpServer function located in the...
Exploit for Out-of-bounds Write in Watchguard Fireware
watchguard-CVE-2025-9242 Authorized-use tooling for WatchGuar...
Exploit for Improper Authorization in Microsoft
No d...
EUVD-2026-48868
In the Linux kernel, the following vulnerability has been resolved: udf: validate free block extents against the partition length udffreeblocks checks the logical block number and count against the partition length, but drops the extent offset from that final bound. A crafted extent can pass the...
CVE-2026-64319
CVE-2026-64319 refers to a Linux kernel vulnerability in the nvmet-auth path where DHCHAP/response payload bounds were not verified against the transfer length. The issue allows a malicious NVMe‑oF initiator to craft a DHCHAP_REPLY with small transfer length but large hl/dhvlen values, yielding o...
Exploit for Use After Free in Linux Linux_Kernel
unplus CVE-2026-43499 Futex PI UAF: The core logic code for...
Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver
Aristotle ADB Enable A minimal Android app that turns on AD...
Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver
Exploit for CVE-2022-38181 The write up can be found here...
PT-2026-64540
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvmet auth reply function where the variable-length rval array is accessed using attacker-controlled hl hash length and dhvlen DH value length fields without...
DEBIAN-CVE-2026-66040
FFmpeg through 8.1.2, fixed in commit b506faf, contains a heap out-of-bounds write vulnerability in the native PNG and APNG encoders that allows remote attackers to corrupt heap memory by supplying a crafted PNG image with a malicious eXIf chunk. Attackers can craft an eXIf chunk where multiple I...
CVE-2026-65710 sysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryption
sysPass through version 3.2.11 contains a missing authorization vulnerability that allows authenticated users with the PUBLICLINKCREATE profile flag to trigger unauthorized decryption and persistent storage of any vault account's password by exploiting the absence of AccountAcl checks in the publ...
Exploit for Deserialization of Untrusted Data in Facebook React
💀 React2Shell Exploit — CVE-2025-55182 ██████╗ ███████╗...
Exploit for Use After Free in Linux Linux_Kernel
No d...
Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine. They codenamed the flaw Certighost. Because Domain Controller accounts carry directory...
Exploit for Out-of-bounds Write in Linux Linux_Kernel
PoC-CVE-2026-46...
Exploit for Argument Injection in Phpmailer_Project Phpmailer
No d...
CVE-2026-24727 SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive...
Exploit for Missing Authentication for Critical Function in Cpanel
No d...
NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats
Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security rates all eight as high severity and says its AI pentest agents found them in a six-hour review of the forum software's source code. Every version before 4.14.0 is affected. NodeBB has...