Lucene search
+L

17758 matches found

CVE
CVE
added 2026/09/17 4:10 p.m.5 views

CVE-2026-92487

CVE-2026-92487 is a race condition in the Linux kernel's exfat filesystem . When a shared writable mapping has its valid_size extended (via a buffered write or page fault), exfat zeroes the page-cache gap below the new valid_size. A concurrent store through the mapping can race with this zeroing ...

0.00189EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/17 4:10 p.m.3 views

EUVD-2026-82108

In the Linux kernel, the following vulnerability has been resolved: exfat: fix validsize extension over a shared writable mapping When a shared writable mapping has its validsize extended by a buffered write or a page fault, exfat zeroes the page-cache gap below the new validsize. A store through...

0.00189EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/17 4:06 p.m.8 views

CVE-2026-90108

CVE-2026-90108 is a memory leak in the Linux kernel 's net/smc subsystem. When smc_llc_event_handler() transitions the local LLC flow from SMC_LLC_FLOW_REQ_ADD_LINK to SMC_LLC_FLOW_ADD_LINK, it overwrites flow->qentry via smc_llc_flow_qentry_set() without first freeing a previously stashed ent...

0.00205EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/17 4:06 p.m.6 views

CVE-2026-90086

CVE-2026-90086 affects the Linux kernel AF_XDP (xsk) zero-copy TX path . The root cause is that the zero-copy path reads TX metadata whenever the UMEM has metadata space, even when the descriptor does not set the XDP_TX_METADATA flag. The fix passes descriptor options through the metadata helpers...

0.00198EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/17 3:30 p.m.12 views

CVE-2026-86861

pgAdmin 4 's File Manager save_file endpoint (used by the Query Tool and ERD) contained a TOCTOU race : after validating a path with check_access_permission(), it opened the file with a plain open() call lacking the O_NOFOLLOW protection that the separate upload path had gained in CVE-2026-7819. ...

6CVSS0.0044EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/17 3:26 p.m.12 views

security-research

Security Research A collection of files related to my personal security research. Additional content will be posted on my blog https://blog.mirch.io. Tools Tool| Description ---|--- openssldircheck| Windows utility to check for potential insecure paths used by the OPENSSLDIR build parameter in...

9.3CVSS7.7AI score0.59417EPSS
SaveExploits86References10
EUVD
EUVD
added 2026/09/17 2:58 p.m.5 views

EUVD-2026-81013

Redocly CLI: Path traversal when using split command...

4.4CVSS0.00172EPSS
SaveExploits0References8
Kitploit
Kitploit
added 2026/09/17 2:52 p.m.12 views

CVE-2026-31413-BPF-Container-Escape

CVE-2026-31413: One Byte in the BPF Verifier to Container Escape I found a soundness bug in the Linux BPF verifier - a + 1 in a pushstack call that causes the verifier to skip an ALU instruction on a forked path. For BPFOR, this means the verifier tracks dst = 0 while the CPU computes 0 | K = K. ...

7.8CVSS7.1AI score0.00221EPSS
SaveExploits2References6
NVD
NVD
added 2026/09/17 1:17 p.m.6 views

CVE-2026-92919

admin3 through 3.0.0 fails to sanitize client-supplied filenames in the upload handler, allowing authenticated users to write files outside the storage root on Windows deployments. Attackers can use dot-dot path segments in filenames to escape the configured storage directory and overwrite...

8.1CVSS0.00383EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/09/17 11:24 a.m.7 views

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-漏洞利用工具集 一套为渗透测试人员和红队提供的漏洞利用工具和文档,用于协助利用 Linux Dirty Pipe 漏洞。 关于漏洞 Dirty Pipe CVE-2022-0847 是 Linux 内核中的一个本地提权漏洞,可能允许非特权用户执行以下操作: 修改/覆盖任意只读文件,如 /etc/passwd。 获得一个高权限 shell。 受影响版本 Linux 内核版本高于 5.8 的版本受影响。 目前该漏洞已在以下 Linux 内核版本中修复: 5.16.11 5.15.25 5.10.102...

7.8CVSS6.8AI score0.89721EPSS
SaveExploits102References2
Kitploit
Kitploit
added 2026/09/17 11:03 a.m.4 views

Holistic-Deconstruction-of-CVE-2019-5736-

= doi.org/10.5281/zenodo.18304765 = orcid.org/0009-0007-7728-256X README.md 💀 CVE-2019-5736: runc Container Breakout Deconstruction Advanced Purple Teaming & Forensic Analysis of Host Root Escape 🛡️ Overview This repository contains a high-fidelity deconstruction and Proof-of-Concept PoC for...

9.3CVSS7.5AI score0.98452EPSS
SaveExploits35
Patchstack
Patchstack
added 2026/09/17 6:09 a.m.6 views

WordPress MultiVendorX plugin 5.0.0-5.0.15 - Subscriber+ Arbitrary Store Data and Ownership Overwrite vulnerability

Subscriber+ Arbitrary Store Data and Ownership Overwrite vulnerability discovered by Farid Narimanov in WordPress Plugin MultiVendorX versions 5.0.0-5.0.15...

7.1CVSS0.00315EPSS
SaveExploits0References1Affected Software1
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.39 views

GL.iNet <= 4.3.7 - Arbitrary File Write

GL.iNet = 4.3.7 is vulnerable to an arbitrary file write exploit, allowing an attacker to overwrite arbitrary system files. id: CVE-2023-46455 info: name: GL.iNet = 4.3.7 - Arbitrary File Write author: Zierax severity: high description: | GL.iNet = 4.3.7 is vulnerable to an arbitrary file write...

7.5CVSS7.3AI score0.46966EPSS
SaveExploits4References2
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.16 views

Dgraph <=v25.3.0 - Admin Mutation Missing Authorization

Dgraph =v25.3.0 contains an authentication bypass caused by missing authorization middleware for the restoreTenant admin mutation, letting unauthenticated attackers overwrite the database, read files, and perform SSRF, exploit requires no authentication. id: CVE-2026-34976 info: name: Dgraph...

10CVSS7.4AI score0.02036EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.29 views

Multiple Thrive Themes < 2.0.0 - Arbitrary File Upload

Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Squared by...

9.1CVSS7.9AI score0.03946EPSS
SaveExploits2References2
Nuclei
Nuclei
added 2026/09/17 2:05 a.m.35 views

ComfyUI-Manager < 3.38 - Configuration Overwrite

ComfyUI-Manager 3.38 contains an insecure file storage vulnerability caused by storing files in an insufficiently protected location accessible via the web interface, letting remote attackers manipulate configuration and critical data, exploit requires web access. id: CVE-2025-67303 info: name:...

7.5CVSS8AI score0.01412EPSS
SaveExploits4References3
Kitploit
Kitploit
added 2026/09/17 1:54 a.m.13 views

copyfail-exploit

Copy Fail · CVE-2026-31431 Escalada de privilegios local en kernels de Linux desde 4.11 hasta sin incluir las versiones parcheadas 6.18. El fallo reside en la interfaz de sockets AFALG del kernel, específicamente en cómo authencesn maneja las listas scatter-gather durante el descifrado AEAD...

7.8CVSS6.7AI score0.99907EPSS
SaveExploits243References2
Kitploit
Kitploit
added 2026/09/17 1:54 a.m.10 views

CVE-2026-31431

Copy Fail - CVE-2026-31431 Este repositorio contiene un pequeño PoC de escalada de privilegios local en Linux para CVE-2026-31431, también conocido como "Copy Fail". El exploit ataca la ruta algifaead del kernel Linux en la API criptográfica de espacio de usuario AFALG. Utiliza AFALG junto con...

7.8CVSS6.5AI score0.99907EPSS
SaveExploits243References1
Kitploit
Kitploit
added 2026/09/17 1:52 a.m.9 views

copy-fail-CVE-2026-31431-shell

CVE-2026-31431 - shell copyfail Escalada local de privilegios mediante socket AFALG + sobrescritura de caché de páginas con splice. Sobrescribe un binario SUID de solo lectura /usr/bin/su con un ELF mínimo que llama a setuid0 + execve"/bin/sh". Sin condición de carrera, sin offsets específicos po...

7.8CVSS6.6AI score0.99907EPSS
SaveExploits243
Kitploit
Kitploit
added 2026/09/17 1:48 a.m.9 views

CVE-2026-31431-CopyFail-Lab

CVE-2026-31431 "Copy Fail" — Laboratorio de LPE en el Kernel de Linux Descripción general Este repositorio documenta una investigación completa de laboratorio sobre CVE-2026-31431 Copy Fail , una vulnerabilidad de escalada de privilegios local LPE de alta severidad en el módulo criptográfico...

7.8CVSS6.7AI score0.99907EPSS
SaveExploits243
Rows per page
Query Builder