CVE-2026-88270

GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated...

CVE-2026-88271 GV-LPC2011/LPC2211 - SSVR Guest Configuration Overwrite and Administrative Credential Takeover

GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR...

EUVD-2026-75304

GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR...

EUVD-2026-75303

GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated...

CVE-2026-88270

GeoVision GV-LPC2211 (and GV-LPC2011, per the title) V1.13 is affected by a Denial of Service vulnerability in the SSVR (Secure Service Virtual Router) component. A user with Guest privileges can trigger the firmware-upgrade mode and cause live services to be disrupted before any firmware image i...

CVE-2026-88270 GV-LPC2011/LPC2211 - SSVR Guest Firmware-Mode Pre-Validation Service Teardown Denial of Service

GeoVision GV-LPC2211 V1.13 allows a Guest user to enter SSVR firmware-upgrade mode and disrupt live services before any firmware image is validated...

CVE-2026-88269 GV-LPC2011/LPC2211 - SSVR Guest Configuration and Credential Disclosure

GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSVR...

EUVD-2026-75302

GeoVision GV-LPC2211 V1.13 allows a Guest user to retrieve persistent device configuration containing plaintext administrative and user credentials through SSVR...

CVE-2026-88269

GeoVision GV-LPC2211 V1.13 (also referenced as GV-LPC2011) is affected by a credential disclosure vulnerability in its SSVR service. A Guest-level user can retrieve the persistent device configuration, which contains plaintext administrative and user credentials , leading to a high-impact confide...

Cacti 1.2.24 - SQL Injection

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a SQL injection discovered in graphview.php. Since guest users can access graphview.php without authentication by default, if guest users are being utilized in an enabled state, there...

0vercl0k

0vercl0k CVE-2021-28476 的 PoC，一个存在于 vmswitch.sys 中的“Hyper-V 远程代码执行漏洞”，可实现从客户机到宿主的攻击。...

CVE-2021-28476

CVE-2021-28476：Hyper-V vmswitch.sys 来自客户虚拟机的任意指针解引用 摘要： Hyper-V 客户虚拟机可因其 vmswitch.sys 中的 VmsIfrInfoParamsOIDSWITCHNICREQUEST 函数对输入的不安全解析，而在其底层宿主机上触发拒绝服务（Denial-of-Service）条件。该崩溃是由函数试图将客户机控制的值当作宿主机虚拟地址进行解引用所致。在某些条件下，此漏洞可能被用于获取远程代码执行（RCE），即当请求连同指向攻击者控制数据的指针被传递给底层硬件设备时，但据我所知，该技术尚未被公开演示。 披露日期： 补丁日期：...

CVE-2026-35250

CVE-2026-35250 mi primer CVE es un 2.3 Desbordamiento de enteros en DevVGAVBVA puede causar DoS desde un invitado privilegiado Hallazgo asistido por IA y PoC completamente escrito por IA El problema está en src/VBox/Devices/Graphics/DevVGAVBVA.cpp:740-743 ASSERTGUESTMSGRETURN donde la comprobació...

CVE-2026-73789

A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized...

EUVD-2026-75126

A vulnerability in the web-based management interface of CPPM guest account management services could allow an unauthenticated remote attacker to manipulate account settings. Successful exploitation could allow an attacker to extend network access beyond policy limits, leading to unauthorized...

CVE-2026-73789

HPE CPPM guest account management services is affected by an unauthenticated insecure parameter manipulation vulnerability in its web-based management interface. An unauthenticated remote attacker can tamper with account settings, potentially extending network access beyond policy limits and lead...

CVE-2026-80921

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb crycb 0 or 1, the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested...

DEBIAN-CVE-2026-80921

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb crycb 0 or 1, the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested...

AZL-99950 CVE-2026-80921 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb crycb 0 or 1, the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested...

CVE-2026-80921

CVE-2026-80921 affects the Linux kernel in the KVM s390 vsie (Virtual SIE) subsystem. When shadowing crypto access bits from a format0 apcb (crycb 0 or 1), bits 64–255 retain stale values from the vsie page, potentially allowing a nested guest to access a device no longer available . The CVSS 3.1...