MPDV Mikrolab GmbH HYDRA X, MIP 2 & FEDRA 2 - Path Traversal

MPDV Mikrolab GmbH HYDRA X, MIP 2, and FEDRA 2 = Maintenance Pack 36 with Servicepack 8 week 36/2025 contain an unauthenticated local file disclosure vulnerability caused by improper validation of the "Filename" parameter in the public $SCHEMAS$ resource, letting attackers read arbitrary Windows ...

PoC_CVE-2023-24055

PoCCVE-2023-24055 如何运行？ 编辑脚本中的 $User 变量，将其值替换为你的用户名。 以管理员身份打开 PowerShell 并运行脚本： root@kitploit: ./PoCCVE-2023-24055.ps1 脚本执行后打开 KeePass。 结果保存在 C:\Users\yourusername\AppData\Local\Temp\output.xml 中。 密码以明文形式存储在： root@kitploit: Password ExempePassword 来源 https://vulners.com/cve/CVE-2023-24055...

CVE-2026-57006

In acfwffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56950

In validatensbuf of mbuclass.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0197

In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79156

In VPU, there is a possible information dislclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0183

CVE-2026-0183 is an information disclosure vulnerability in CPM caused by a confused deputy flaw. An attacker with System execution privileges can exploit it locally without user interaction to achieve high confidentiality impact, while integrity and availability remain unaffected. The CNA-assign...

CVE-2026-0183

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

Astra Linux – Vulnerability in Intel Microcode

A domain-bypass transient execution vulnerability in some Intel AtomR processors may allow an authenticated user to potentially enable information disclosure through local access...

CVE-2026-45525

In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-69351

Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

CVE-2026-69315

Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally...

CVE-2026-68873

Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally...

EUVD-2026-73608

Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally...

EUVD-2026-73456

Exposure of private personal information to an unauthorized actor in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

EUVD-2026-73413

Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally...

EUVD-2026-73056

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-20513

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245...

EUVD-2026-72206

In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11087533; Issue ID: MSV-8245...

CVE-2026-20513

CVE-2026-20513 affects MediaTek's Audio HAL , where improper input validation can lead to a local information disclosure . An attacker must already hold the System privilege ; no user interaction is required. The vulnerability is rated CVSS 4.4 (MEDIUM) with high confidentiality impact but no int...