40295 matches found
FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95285): chromium -- security fixes
Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
PT-2026-102852
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description An uninitialized resource in the GPU allows a remote attacker who has compromised the renderer process to read memory outside the sandbox by using a crafted HTML page. Recommendations...
FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95314): chromium -- security fixes
Incorrect authorization in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-95382: Improper Input Validation
Improper input validation in Auth in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-95335: Use After Free
Use after free in HID in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-95276: Improper Input Validation
Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code inside the sandbox via crafted network traffic. Chromium security severity: Medium...
Uncontrolled Recursion
Overview PyJWT is a Python implementation of RFC 7519. Affected versions of this package are vulnerable to Uncontrolled Recursion via the load method in jwt/apijws.py when parsing a JWT with a deeply nested recursive JSON structure in the header. An attacker can supply a JWT whose header contains...
CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-
Evolution CMS XSS Reflejado v3.2.3 Autor: Sergio Descripción: Una vulnerabilidad de cross-site scripting XSS reflejado en el proceso de conexión de la instalación de Evolution v.3.2.3 permite a un atacante local ejecutar scripts web arbitrarios mediante un payload manipulado inyectado en el...
0xM0nCrush
0xM0nCrush Un terminador de procesos de Windows multiversión. Carga un controlador kernel firmado de HONOR MonProcessEX.sys, resuelve el PID de cada proceso objetivo y lo termina desde el contexto del kernel mediante un único IOCTL. Sin offsets de kernel, sin descargas de PDB, sin shellcode...
CVE-2026-102296 ZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Response
ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse that allow malicious HTTP cameras or intercepting attackers to overflow fixed-size buffers by sending oversized response headers. Attackers can send crafted HTTP responses with oversized stat...
CVE-2026-102281 Nest: Remote process termination via a deeply nested microservice message pattern
Nest is a framework for building scalable Node.js server-side applications. Prior to 11.2.4 and 12.0.2, a single message with a deeply nested object in its pattern can terminate a NestJS microservice using the TCP or RabbitMQ transport. ServerTCPhandleMessage and ServerRMQhandleMessage pass a...
CVE-2026-102006
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...
CVE-2025-7771
CVE-2025-7771 Un PoC simple que demuestra la vulnerabilidad en el controlador ThrottleStop.sys, mostrando capacidades arbitrarias de lectura y escritura de memoria física, así como la traducción de direcciones virtuales a físicas mediante Superfetch. ⚡ Uso: 1. Registrar un servicio: Ejecute...
EUVD-2026-88548
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...
CVE-2026-102006 VxWorks 7 Memory allocation
In Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the process management subsystem failing to properly release allocated kernel memory before terminating the calling application. Fixed in Version 26.09...
CVE-2026-102006
Wind River VxWorks 7 prior to version 26.09 is vulnerable to a memory management flaw where specific system call arguments cause the process management subsystem to fail to release allocated kernel memory before an application terminates. This can lead to a high availability impact as kernel memo...
CVE-2026-36425
CVE-2026-36425 : OPSWAT AppRemover Arbitrary Process Termination Un controlador kernel de OPSWAT firmado que mata cualquier proceso bajo demanda. Sin necesidad de derechos de administrador, sin comprobaciones de privilegios, sin hacer preguntas. Apúntalo a un EDR, a un antivirus, a un proceso...
CVE-2025-61156
CVE-2025-61156 Se descubrió una vulnerabilidad en el componente TfSysMon.sys del modo kernel de ThreatFire System Monitor =v4.7.0.53 que permite a usuarios sin privilegios realizar la terminación arbitraria de procesos con privilegios de modo kernel. Como resultado, los procesos PPL y los proceso...
CVE-2020-8290
CVE-2020-8290 – Backblaze 中的权限提升 摘要 名称： Backblaze 中的权限提升 CVE： CVE-2020-8290 发现者： Jason Geffner 供应商： Backblaze 产品： Backblaze for Windows 和 Backblaze for macOS 风险： 高 发现日期： 2020-03-13 公开日期： 2020-09-09 修复版本： 7.0.0.439 简介 根据维基百科，Backblaze 是 “一种在线备份工具，允许 Windows 和 macOS...