CVE-2026-81884

radare2 is a UNIX-like reverse engineering framework. Prior to 6.2.0 , its Mach-O LC_DATA_IN_CODE parser trusted the dataoff and datasize fields and allowed a final partial record to be processed. When datasize was not a multiple of data_in_code_entry, the last iteration read beyond the allocated...

CVE-2026-81881 radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift field-metadata parser was vulnerable because a relative Swift field pointer could be lower than the field-metadata section base, making subtraction produce a negative logical inde...

EUVD-2026-84502

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift field-metadata parser was vulnerable because a relative Swift field pointer could be lower than the field-metadata section base, making subtraction produce a negative logical inde...

CVE-2026-81881

radare2 (a UNIX-like reverse engineering framework) is affected by a heap out-of-bounds read in its Mach-O Swift field-metadata parser prior to version 6.2.0 . A relative Swift field pointer that is lower than the field-metadata section base causes a negative logical index, which reads four bytes...

CVE-2026-41490

CVE-2026-41490 — SQL Injection in Dagster database I/O managers via dynamic partition keys Severity : High CVSS 8.3 CWE : CWE-89 — SQL Injection Affected : Dagster core = 1.13.0 and integration packages = 0.29.0 Fixed in : Dagster core 1.13.1 and integration packages 0.29.1 Advisory :...

CVE-2014-4076

PoC de CVE-2014-4076 Esta prueba de concepto está copiada directamente de su versión original en Python y reescrita en C++. Compilación Este proyecto se compila con Visual Studio 2013 Update 4. Aviso Solo los usuarios que estén en el grupo de Administradores pueden abrir el dispositivo y realizar...

CVE-2026-12485

🚨 CVE-2026-12485 - Critical Unauthenticated Remote Code Execution RCE GeoVision GV-I/O Box 4E – Firmware v2.09 Disclosure Date: June 23, 2026 CWE: CWE-121 – Stack-Based Buffer Overflow Attack Vector: Network Unauthenticated An unauthenticated stack-based buffer overflow vulnerability in the...

MSI_FeatureManager_CVE

KernCoreLib64.sys PoC de Vulnerabilidad Abuso de Memoria Física y Puertos de E/S para Escalada de Privilegios...

CVE-2026-13714

Realtyna WPL 5.3.0 - Exploit de RCE no autenticado Descripción Este exploit apunta a una vulnerabilidad crítica en el plugin Realtyna Organic IDX + WPL Real Estate en versiones anteriores a la 5.3.0. El plugin utiliza credenciales codificadas y permite la carga de archivos no autenticada, lo que...

SUSE CVE-2026-15801

A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host...

CVE-2026-14960-CVE-2026-14961

Vulnerabilidades de Escalada de Privilegios en el Controlador Pegatron TdeIo64 tdeio64.sys | ---|--- Identificadores CVE| CVE-2026-14960, CVE-2026-14961 Fabricante| Pegatron Corporation Producto| Controlador TdeIo tdeio64.sys Interfaz del Dispositivo| \.\TdeIo Tipos de Vulnerabilidad| Control de...

USN-8788-1 clamav vulnerabilities

It was discovered that ClamAV incorrectly handled certain zip archive files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. CVE-2026-20337, CVE-2026-20338 It was discovered that ClamAV incorrectly handled certain PESpin files. A remote...

USN-8788-1: ClamAV vulnerabilities

It was discovered that ClamAV incorrectly handled certain zip archive files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. CVE-2026-20337, CVE-2026-20338 It was discovered that ClamAV incorrectly handled certain PESpin files. A remote...

ThrottleStopPoC

ThrottleStopPoC CVE-2025-7771 : Lectura/escritura arbitraria de memoria física y puertos de E/S a través del controlador ThrottleStop ThrottleStop es una pequeña aplicación legítima utilizada para monitorear y corregir el throttling de la CPU. Tiene un controlador que facilita estas tareas y en s...

CVE-2026-92574

A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container to bypass the destination Kubernetes security context. The restored process may retain credentials, Linux capabilities, nonewprivs, and seccomp state from the checkpoint instead ...

EUVD-2026-83881

A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container to bypass the destination Kubernetes security context. The restored process may retain credentials, Linux capabilities, nonewprivs, and seccomp state from the checkpoint instead ...

CVE-2026-92574

A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container to bypass the destination Kubernetes security context. The restored process may retain credentials, Linux capabilities, no_new_privs, and seccomp state from the checkpoint instea...

CVE-2026-92574

A vulnerability in CRI-O checkpoint restore allows a user who can create a pod from a malicious checkpointed container to bypass the destination Kubernetes security context. The restored process may retain credentials, Linux capabilities, nonewprivs, and seccomp state from the checkpoint instead ...

CVE-2026-15801

A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host...

EUVD-2026-83865

A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host...