vim: Vim: Arbitrary code execution via Python omni-completion

A flaw was found in Vim, a widely used command-line text editor. This vulnerability allows a local attacker to execute arbitrary code on the system. By opening a specially crafted Python file and then triggering the omni-completion feature, the attacker can cause Vim to run malicious code from a...

kernel: perf/core: Detach event groups during remove_on_exec

A flaw was found in the Linux kernel's performance monitoring unit PMU subsystem. This vulnerability occurs when a performance event group leader is removed during process execution, but its associated events siblings remain active and linked to a stale list. This inconsistent state can lead to a...

kernel: drm/amdgpu: Fix context pstate override handling

A flaw was found in the Linux kernel's amdgpu graphics driver. Improper handling of context pstate overrides can lead to use-after-free and NULL pointer dereferences during context initialization and finalization. A local attacker could exploit this vulnerability to cause system instability or a...

kernel: perf: Reject exited events as group leaders

A flaw was found in the Linux kernel's performance monitoring perf subsystem. This vulnerability allows a local attacker to trigger a use-after-free condition by improperly handling exited events as group leaders. Successful exploitation could lead to a system crash, resulting in a denial of...

CVE-2026-98104

A flaw was found in the Linux kernel's network traffic control u32 classifier clsu32. This vulnerability allows a local user with network administration privileges to cause a Denial of Service DoS. When the pool of internal identifiers for filters or hash tables is exhausted, the kernel fails to...

CVE-2026-93267

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA subsystem. During object deallocation, internal resources associated with a Direct Memory Access Handle DMAH may be freed before the handle is removed from resource tracking. A local attacker can exploit this race condition...

CVE-2026-93795

A flaw was found in the Linux kernel's block control group blk-cgroup subsystem, which can lead to a Denial of Service DoS. When an insertion failure occurs during the creation of a block group structure, the error-handling path fails to properly shut down reference counting. A local user can...

CVE-2026-93794

A flaw was found in the Linux kernel's SMB Server Message Block client. A local user can cause data corruption when performing hole-punching operations on a mounted SMB share. Because dirty memory pages are not flushed prior to punching a hole, uncommitted cached data can subsequently be written...

CVE-2026-93796

A flaw was found in the Linux kernel's iwlwifi driver. When wireless device initialization encounters an error during transmit setup, the cleanup process frees memory allocated for packet reception but fails to clear the corresponding pointers. A local user could trigger subsequent device teardow...

CVE-2026-93261

A flaw was found in the Linux kernel's lock dependency validator lockdep. When lock class registration fails, the kernel omits a check for an empty result before calculating internal index values, leading to memory corruption. A local user can exploit this vulnerability during lock reacquisition ...

CVE-2026-93789

A flaw was found in the Linux kernel's iwlwifi driver. This vulnerability allows a local user capable of loading custom firmware to cause a Denial of Service DoS through a system crash. The issue stems from insufficient bounds checking when parsing aligned Type-Length-Value TLV data blocks within...

CVE-2025-4802-Proof-of-Concept

CVE-2025-4802 — 概念验证 ⚠️ 免责声明： 本仓库仅供教育和授权安全研究目的使用。 请勿对您不拥有或未获得明确测试许可的系统使用此漏洞利用程序。滥用可能违反法律法规。 CVE 摘要 字段| 详情 ---|--- CVE ID| CVE-2025-4802 受影响软件| GNU C 库（glibc） 受影响版本| 2.27 – 2.38 漏洞类型| 通过不可信的 LDLIBRARYPATH 进行权限提升 攻击向量| 本地 描述 GNU C 库（glibc）2.27 至 2.38 版本中存在一个漏洞，允许攻击者在调用 dlopen 的静态编译的 setuid 二进制文件 中利用...

CVE-2024-55347

CVE 開示: CVE-2024-55347 CVE-2024-55347 の公開開示 🚀 日付: 10-02-2025 概要 Kroll Artifact Parser And Extractor KAPE v1.3.0.2 における Binary Planting の脆弱性により、攻撃者は悪意を持って作成されたバイナリファイルを特定のディレクトリに配置することで、権限を昇格させ、任意のコードを実行できる可能性があります。これにより、不正なシステムアクセスや機密データの侵害につながる可能性があります。 影響を受ける製品 ベンダー : Kape by Eric Zimmerman 製品 ...

CVE-2026-93782

A flaw was found in the Linux kernel's vhost-scsi driver. When updating device memory tables, the driver fails to wait for in-flight storage commands to complete before replacing memory mappings. A local user can exploit this issue to overwrite unintended memory when asynchronous command response...

CVE-2026-101036

A vulnerability has been found in FLB-Music FLB-Music-Player 1.1.8/1.1.9/1.2.0/1.2.1. This impacts the function path.join of the file /src/main/core/createParsedTrack.ts. The manipulation leads to path traversal. The attack must be carried out locally. The exploit has been disclosed to the public...

CVE-2023-40297

CVE-2023-40297 Stakater Forecastle v1.0.144 では、Webサイトコンポーネントにおけるディレクトリトラバーサルが可能です 脆弱性タイプ ディレクトリトラバーサル 製品ベンダー Stakater 影響を受ける製品コードベース Forecastle = v1.0.144 影響を受けるコンポーネント 影響を受けるコンポーネント: URL - https://www.example.com/%5C../etc/passwd 攻撃タイプ Local 影響: 権限昇格 true 影響: 情報漏洩 true 攻撃ベクトル 攻撃ベクトル:...

CVE-2026-94287

A flaw was found in libXpm. An unsigned integer underflow vulnerability exists in the library's write path when processing image data. A local attacker could exploit this issue by convincing a user or application to process a specially crafted file, causing unbounded CPU and memory consumption th...

CVE-2026-101036

A path traversal vulnerability exists in FLB-Music FLB-Music-Player versions 1.1.8, 1.1.9, 1.2.0, and 1.2.1 . The flaw originates from the path.join function within the file /src/main/core/createParsedTrack.ts . This vulnerability requires local access to exploit. While the exploit has been discl...

CVE-2026-101036 FLB-Music FLB-Music-Player createParsedTrack.ts path.join path traversal

A vulnerability has been found in FLB-Music FLB-Music-Player 1.1.8/1.1.9/1.2.0/1.2.1. This impacts the function path.join of the file /src/main/core/createParsedTrack.ts. The manipulation leads to path traversal. The attack must be carried out locally. The exploit has been disclosed to the public...

EUVD-2026-88198

A vulnerability has been found in FLB-Music FLB-Music-Player 1.1.8/1.1.9/1.2.0/1.2.1. This impacts the function path.join of the file /src/main/core/createParsedTrack.ts. The manipulation leads to path traversal. The attack must be carried out locally. The exploit has been disclosed to the public...