EUVD-2026-118338

In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition...

Copy-Fail-CVE-2026-31431-Kubernetes-PoC

Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC A proof-of-concept demonstrating how a fully unprivileged container can achieve node-level code execution on Kubernetes by exploiting the CVE-2026-31431 Linux kernel page-cache corruption bug through shared container image layers. The cor...

RatRace

RatRace A lightweight CLI tool for systematically detecting and exploiting race conditions in web applications, APIs, and modern services. What Problem It Solves Race conditions represent one of the highest-impact security vulnerabilities in modern applications, yet they remain poorly covered by...

CVE-2026-123835

In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition...

CVE-2026-111573

Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL allow a local user to execute arbitrary code as SYSTEM by placing scripts in the agent's...

CVE-2026-123835

In JetBrains Datalore versions prior to 2026.4 , a Time-of-check Time-of-use (TOCTOU) race condition during an init script upload allows for code execution within another user's computation. No specific exploit links or remediation details are provided in the documents.

CVE-2026-123835

In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition...

CVE-2026-111573

Checkmk versions <2.5.0p18 , <2.4.0p39 ,

CVE-2026-111573 Privilege escalation via unprotected Windows agent data folder

Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL allow a local user to execute arbitrary code as SYSTEM by placing scripts in the agent's...

CVE-2026-123486

WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows attackers to bypass IPN replay protection due to a non-atomic deduplication check and insert. Attackers can concurrently replay a captured valid recurring-payment notification so both...

CVE-2026-123486

The WWBN AVideo software (versions 29.0 through 29.4.0 ) is affected by a race condition vulnerability in the plugin/PayPalYPT/ipn.php component. The root cause is a non-atomic deduplication check and insert , which allows attackers to bypass IPN replay protection. By concurrently replaying a cap...

CVE-2026-123486 WWBN AVideo 29.0 through 29.4.0 Race Condition in PayPal IPN Deduplication via ipn.php

WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows attackers to bypass IPN replay protection due to a non-atomic deduplication check and insert. Attackers can concurrently replay a captured valid recurring-payment notification so both...

EUVD-2026-118286

WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows attackers to bypass IPN replay protection due to a non-atomic deduplication check and insert. Attackers can concurrently replay a captured valid recurring-payment notification so both...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...

kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

cockpit-files security update

An update is available for cockpit-files. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A filesystem browser for Cockpit Security Fixes: cockpit-files:...

keycloak-services: keycloak-services: Account takeover via authentication race using reset-credentials path

A flaw was found in the authentication session handling of the keycloak-services component in Keycloak. The issue occurs because the system fails to verify if an authenticator is valid for the current authentication flow when switching between the standard authentication path and the reset...

keycloak-services: keycloak-services: Account takeover via authentication race using reset-credentials path

A flaw was found in the authentication session handling of the keycloak-services component in Keycloak. The issue occurs because the system fails to verify if an authenticator is valid for the current authentication flow when switching between the standard authentication path and the reset...

Learn-about-cve-2025-31133-poc

Learn-about-cve-2025-31133-poc Overview A proof-of-concept demonstration and learning environment for CVE-2025-31133 , a security vulnerability in runc that allows bypassing maskedPaths protection through a race condition. maskedPaths are designed to prevent containers from accessing sensitive ho...

WannaRace

🚀 WannaRace WebApp intentionally made vulnerable to Race Condition 🤖 Description Race Condition vulnerability can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to b...