CVE-2026-102473

A vulnerability exists in dash where the internal pmatch() matcher implements the * wildcard using unbounded recursion over candidate positions when built without libc fnmatch . A local user capable of providing filenames to the matcher can trigger super-polynomial backtracking by using short mul...

EUVD-2026-88667

A flaw was found in dash. When built without libc fnmatch, the internal pmatch matcher implements by unbounded recursion over candidate positions. A local user who can plant filenames, or otherwise feed that matcher, can make a short multi-star pattern such as .....tar.gz consume excessive CPU...

CVE-2026-86157

Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...

CVE-2026-97584

A flaw was found in the Linux kernel's AFS Andrew File System subsystem. During server lookup operations, the candidate cleanup routine incorrectly frees memory associated with an existing server's endpoint state. A local user interacting with the filesystem could exploit this issue to trigger...

CVE-2026-86158

Progress Software Fiddler Everywhere 8.0.2 contains a vulnerability due to missing authentication in its local .NET backend (Fiddler.WebUi ). A local unauthenticated attacker can exploit unauthenticated localhost HTTP and SignalR RPC channels to mint OAuth tokens and read the machine-in-the-middl...

CVE-2026-86157

Progress Telerik Fiddler Everywhere versions prior to 8.2.0 are vulnerable to the exposure of privileged IPC functionality . A local, low-privileged attacker who can modify application launch parameters and influence a user to start the application can replace the UI or settings with attacker-con...

EUVD-2026-88648

Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...

CVE-2026-86157 Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere

Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...

CVE-2026-86157 Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere

Exposure of privileged IPC functionality in Progress Telerik Fiddler Everywhere before version 8.2.0 allows a local, low-privileged attacker who can modify application launch parameters and persuade a user to start the application to replace the application UI or settings with attacker-controlled...

CVE-2026-97578

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local user could exploit this vulnerability by submitting a specially crafted video stream with invalid tile parameters. This flaw can trigger a division-by-zero error or an out-of-bounds write to memory,...

CVE-2026-97577

A flaw was found in the Linux kernel's Verisilicon Rockchip AV1 video decoder driver. A local attacker can exploit this vulnerability by submitting a specially crafted AV1 video frame that specifies more tiles than provided by userspace or supported by hardware limits. This lack of bounds...

CVE-2021-4034

CVE-2021- 在 polkit 的 pkexec 实用程序中发现了一个本地权限提升漏洞。pkexec 应用程序是一个 setuid 工具，旨在允许非特权用户根据预定义的策略以特权用户身份运行命令。当前版本的 pkexec 未能正确处理调用参数计数，最终导致将环境变量作为命令执行。攻击者可以通过精心构造环境变量来利用这一点，诱导 pkexec 执行任意代码。攻击成功执行后，可导致本地权限提升，使非特权用户获得目标机器的管理权限。 TryHackMe 链接 - tryhackme.com/jr/cve20214034...

CVE-2026-38053---Remove-PPL

CVE-2026-38053---Remove-PPL BYOVD 移除 PPL（适用于 24H2 和 25H2） Wise System Monitor v1.5.3.127 中 IOCTL 0x12C807（METHODNEITHER）处理程序内的任意内存写入，使攻击者能够通过特制输入导致 PPL 被移除或拒绝服务（DoS）。 附加信息 测试环境：Windows 11 25H2。可能影响所有安装了该漏洞驱动版本的 Windows 版本。 PoC 中使用的 EPROCESS.Protection 偏移量：+0x87A（Windows 11 25H2）。偏移量可能因 Windows...

copy-fail-checker

Copy Fail Checker — CVE-2026-31431 一个轻量、依赖极少的 Bash 脚本，用于判断你的 Linux 系统是否容易受到 Copy Fail 本地权限提升漏洞（CVE-2026-31431）的影响。 该脚本是只读 的：它绝不会利用该漏洞，不会加载内核模块，也不会修改系统。 什么是 Copy Fail？ Copy Fail 是 Linux 内核 authencesn AEAD 加密模板中的一个逻辑缺陷，可通过 AFALG（algifaead）套接字接口从用户空间触达。 字段| 值 ---|--- CVE| CVE-2026-31431 披露时间|...

CVE-2026-97567

A flaw was found in the Linux kernel's MultiPath TCP MPTCP subsystem. A race condition can occur between socket disconnection and packet retransmission timer handling, resulting in an inconsistent socket state. A local user can exploit this timing flaw during active connection teardown to cause a...

CVE-2026-97566

A flaw was found in the Linux kernel. When removing an initial endpoint in the Multipath TCP MPTCP path manager, the system fails to clear pending address announcements, leaving stale entries in memory. A local user can exploit this vulnerability by manipulating MPTCP endpoint configurations, whi...

CVE-2026-97564

A flaw was found in the Linux kernel's SMB Server Message Block client. This vulnerability allows a local user to achieve privilege escalation due to missing validation on identity mapping key descriptions. Because the kernel does not verify that identity mapping requests originate internally, a...

CVE_Project

CVEProject 利用前的准备： 1.在虚拟机上安装 Tomcat 7 sudo apt-get install tomcat7 2.如果第一步失败，请设置 JDKDIRS="/usr/lib/jvm/java-8-oracle" 并添加语句“export JAVAHOME=/usr/lib/jvm/java-8-oracle”和 “export CATALINAHOME=/usr/share/tomcat7” 。然后重新安装 Tomcat 7 3.为 Tomcat 用户设置初始密码 sudo passwd tomcat7 4.为 Tomcat 用户分配登录 shell sudo...

CVE-2026-97512

A flaw was found in the Linux kernel's Qualcomm Serial Peripheral Interface spi-qcom-qspi driver. This flaw can result in a Denial of Service DoS or system instability due to incomplete error handling during runtime power management PM suspend and resume operations. If an operation fails midway,...

CVE-2026-98075

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When a BPF program references its main function as a callback, the kernel fails to translate the function reference into a valid memory address. A local user with permissions to load BPF programs could exploit this...