Lucene search
+L

13423 matches found

Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•55 views

PT-2026-85706

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Complete cleanup after system-resume errors A failed system resume can leave the card unusable until reboot. usb audio resume jumps to err out when snd usb pcm resume or snd usb mixer resume fails. The error path...

8.8CVSS5.9AI score0.00243EPSS
SaveExploits0References128
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/04 12:00 a.m.•2 views

CVE-2026-44402: Unrestricted Upload of File with Dangerous Type

Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid credentials. Attackers can supply a...

9.8CVSS6.7AI score0.01317EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
•added 2026/09/04 12:00 a.m.•7 views

The vulnerability of the max77705_charger_probe() function in the drivers/power/supply/max77705_charger.c file of the Linux kernel’s power management driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the max77705chargerprobe function in the drivers/power/supply/max77705charger.c file of the Linux kernel’s power management driver relates to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

7.8CVSS6.7AI score0.00143EPSS
SaveExploits0References6Affected Software2
NVD
NVD
•added 2026/09/03 11:17 p.m.•15 views

CVE-2026-65818

Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...

9.9CVSS0.00632EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/03 10:59 p.m.•54 views

CVE-2026-65818

CVE-2026-65818 is a server-side request forgery (SSRF) vulnerability in Microsoft Power Automate that allows an authorized attacker to elevate privileges over a network . NVD rates it CRITICAL (9.9) with changed scope and high impact to confidentiality, integrity, and availability; Microsoft's CN...

9.9CVSS7.8AI score0.00632EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2026/09/03 10:59 p.m.•61 views

CVE-2026-65818 Power Automate Elevation of Privilege Vulnerability

...

8.5CVSS0.00632EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/03 10:59 p.m.•16 views

CVE-2026-65818 Power Automate Elevation of Privilege Vulnerability

...

8.5CVSS7.8AI score0.00632EPSS
SaveExploits0References1
Kaspersky
Kaspersky
•added 2026/09/03 12:00 a.m.•12 views

KLA91259 Multiple vulnerability in Microsoft Dynamics

Multiple vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories CVE-2026-65818 Exploitation Related products Microsoft-Power-Platform CVE list CVE-2026-65818 unknown KB list Solution Insta...

9.9CVSS7.6AI score0.00632EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/03 12:00 a.m.•17 views

PT-2026-85309

Name of the Vulnerable Software and Affected Versions Microsoft Power Automate affected versions not specified Description Insufficient validation of server-side requests leads to a server-side request forgery SSRF, a condition where an attacker can induce the server to make requests to an...

9.9CVSS7.6AI score0.00632EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/03 12:00 a.m.•1 views

CVE-2026-65818: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...

9.9CVSS7.8AI score0.00632EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/01 2:17 p.m.•28 views

CVE-2026-9637

A denial-of-service security issue exists in the affected Logix platforms listed in the table above. The security issue stems from improper validation of input length during CIP message processing. This can result in a major nonrecoverable fault MNRF, requiring a power cycle to recover...

8.7CVSS0.00428EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2026/09/01 1:30 p.m.•13 views

SUSE CVE-2026-72332

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Prevent PM resume deadlock in hwctxsyncdebugbo amdxdnahwctxsyncdebugbo invokes the hardware hwctxsyncdebugbo callback while holding xdna-devlock. The callback may call amdxdnacmdsubmit, which in turn calls...

5.9AI score0.00198EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/01 11:45 a.m.•15 views

CVE-2026-80649

A flaw was found in the Linux kernel's System Control and Management Interface SCMI power management. The scmipowernameget function fails to validate the domain number provided by an external caller. This oversight can lead to an out-of-bounds access, potentially allowing an attacker to read or...

7.8CVSS5.9AI score0.00176EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2026/09/01 10:43 a.m.•13 views

CVE-2026-80611

A flaw was found in the Linux kernel's Advanced Configuration and Power Interface ACPI processor idle functionality. When kernel tracing features, such as function tracing or Kprobes, are enabled, entering a Low Power Idle LPI state can trigger a Read-Copy Update RCU warning. This occurs because...

5.5CVSS5.7AI score0.00209EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/09/01 2:14 a.m.•18 views

ps5-uart — Updated!

24 pin header near salina EDM-010 emc header 1 5v 2 5v 3 gnd 4 gnd 5 emc gpio a1. pulling low at emc boot causes emc rom to enter uart shell @ 460800 6 uart rx emc 115200 7 uart tx emc 115200 8 3v3, goes low when emc resets 9 0v? 10 gnd 11 titania uart0 tx efc fw: 460800, eap fw: 691200 12 titani...

5.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/08/31 4:11 p.m.•11 views

CVE-2026-80623

A flaw was found in the Coresight Embedded Trace Extension ETE component of the Linux kernel. This vulnerability arises because the system register states for Embedded Trace Macrocells ETMs and ETE are not consistently preserved when the CPU powers down. A local attacker could potentially trigger...

5.5CVSS5.7AI score0.00206EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/08/31 1:30 p.m.•10 views

SUSE CVE-2026-72143

In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Restore SST-PP control to all domains The SST-PP control offset is only restored to power domain 0 after resume. During suspend, control values are read and stored for all power domains. Use pdinfo-sstbase...

7.1CVSS6.6AI score0.00169EPSS
SaveExploits0References3
NVD
NVD
•added 2026/08/31 10:16 a.m.•11 views

CVE-2026-49003

Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can obtain root privileges to steal configuration passwords such as SNMP, thereby tampering with critical system parameter...

9.6CVSS0.02399EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/31 9:43 a.m.•10 views

EUVD-2026-68455

Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can obtain root privileges to steal configuration passwords such as SNMP, thereby tampering with critical system parameter...

9.6CVSS5.9AI score0.02399EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/31 9:43 a.m.•14 views

CVE-2026-49003 Unauthenticated RCE Vulnerability in ZTE ZXDU68 S202 V5.0 Product

Attackers can exploit command injection vulnerabilities to delete core system runtime files, causing the monitoring module to crash and become paralyzed; simultaneously, they can obtain root privileges to steal configuration passwords such as SNMP, thereby tampering with critical system parameter...

9.6CVSS5.9AI score0.02399EPSS
SaveExploits0References1
Rows per page
Query Builder