907 matches found
CVE-2026-90826
GPAC 26.07.0 contains an out-of-bounds read in the gf_node_del function within scenegraph/base_scenegraph.c (component MP4Box ). The flaw is triggered via local execution with low privileges and requires user interaction, resulting in a partial availability impact (denial of service). CVSS 3.1 sc...
CVE-2026-90811
A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0. This affects the function PermissionManager.checkShellCommand of the file mercury-agent/src/capabilities/permissions.ts of the component Shell Permission Manifest. Executing a manipulation can lead to information...
CVE-2026-90811
cosmicstack-labs mercury-agent (versions up to 1.2.0 ) contains an information disclosure weakness in the Shell Permission Manifest component, specifically in the PermissionManager.checkShellCommand function within mercury-agent/src/capabilities/permissions.ts. The attack requires local execution...
CVE-2026-90811 cosmicstack-labs mercury-agent Shell Permission Manifest permissions.ts PermissionManager.checkShellCommand information disclosure
A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0. This affects the function PermissionManager.checkShellCommand of the file mercury-agent/src/capabilities/permissions.ts of the component Shell Permission Manifest. Executing a manipulation can lead to information...
EUVD-2026-77766
A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0. This affects the function PermissionManager.checkShellCommand of the file mercury-agent/src/capabilities/permissions.ts of the component Shell Permission Manifest. Executing a manipulation can lead to information...
sploitego
Sploitego: el cómplice local de Maltego 1.0 - Introducción Sploitego es un paquete de transforms de pentest local que utiliza el Canari Framework para la ejecución local de transforms en Maltego. El framework se presentó por primera vez en DEFCON 20 y desde entonces ha ido ganando impulso. 2.0 -...
ship-safe
The independent security agent for AI-written software. It finds issues, investigates whether they are real, and shows you the evidence. Website · Docs · Security & Data Flow · Benchmark · Pricing · Blog · Contribute...
linuxprivchecker
Linuxprivchecker.py 一个Linux权限提升检查脚本 原作者：Mike Czumak Tv3rn1x -- @SecuritySift 当前维护者：Michael Contino @Sleventyeleven 该脚本旨在本地Linux系统上执行，以枚举基本系统信息并搜索常见的权限提升向量，例如全局可写文件、配置错误、明文密码以及适用的漏洞利用。 Linuxprivchecker旨在识别需要进一步调查的潜在区域，而非提供直接的操作或利用。这是为了帮助用户进一步了解这些权限提升的工作原理，并遵循为OSCP、HTB及其他CTF/考试所设定的规则，进行自主探索性利用。...
CVE-2026-90611
A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...
CVE-2026-90611 GPAC MP4Box loader_xmt.c xmt_parse_element assertion
A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...
CVE-2026-90611
CVE-2026-90611 affects GPAC (up to commit f1219cde), specifically the xmt_parse_element function in scene_manager/loader_xmt.c of the MP4Box component. A crafted manipulation triggers a reachable assertion , leading to a crash with low availability impact. The attack vector is local , requires lo...
EUVD-2026-77166
A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...
PT-2026-91003
A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmt parse element of the file scene manager/loader xmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...
CVE-2026-90578
A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gflistcount of the file utils/list.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack is restricted to local execution. The exploit has been published and may be used...
CVE-2026-90578
A use-after-free vulnerability exists in the gf_list_count function (utils/list.c) of the MP4Box component in GPAC (affected up to commit f1219cde). The flaw can be triggered via local manipulation with low privileges required and no user interaction, leading to partial compromise of confidential...
EUVD-2026-77063
A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gflistcount of the file utils/list.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack is restricted to local execution. The exploit has been published and may be used...
CVE-2026-81953
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81396
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
