CVE-2023-5178

CVE-2023-5178 The exploit for CVE-2023-5178: NVMe-oF-TCP vulnerability, which is a logic error in NVMe-oF-TCP driver during the handle of corrupted Initialize Connection Request. It leads to racy double-free in kmalloc-96 , which can be exploited to gain LPEsee demo below. The exploit targets...

CVE-2026-123835: JetBrains Datalore: In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload…

In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition...

CVE-2026-123486: WWBN AVideo: WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows…

WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows attackers to bypass IPN replay protection due to a non-atomic deduplication check and insert. Attackers can concurrently replay a captured valid recurring-payment notification so both...

CVE-2026-121957

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a race condition in the client by concurrently transmitting graphics reset commands alongside compressed bitmap data. This flaw leads to a use-after-free condition or out-of-bounds memory access on shared...

CVE-2026-92694 FastNetMon: IPv6 host counters map iterated without lock, racing concurrent inserts

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, FastNetMon's IPv6 top-talkers screen-draw thread in drawtableipv6 in src/fastnetmonlogic.cpp iterates ipv6hostcounters.averagespeedmap without holding countermapmutex while recalculatespeed inserts new keys a...

CVE-2026-92694

FastNetMon , a high-performance DDoS detector and sensor, is vulnerable in version 1.2.9 and earlier due to a race condition in the IPv6 top-talkers screen-draw thread. Specifically, the draw_table_ipv6() function in src/fastnetmon_logic.cpp iterates over ipv6_host_counters.average_speed_map with...

CVE-2026-112938

filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, On POSIX platforms, StrictSoftFileLock and AsyncStrictSoftFileLock validate the coordination directory in ensureprotocoldirectory but later reach the claims directory through opendirectory by pathname, allowing a...

CVE-2026-112938

The filelock Python library (versions 3.30.0 through 4.2.1 ) is vulnerable to a race condition on POSIX platforms. In StrictSoftFileLock and AsyncStrictSoftFileLock , a local account can rename a coordination name to swap in a symbolic link between the directory validation check and the subsequen...

Moderate: Red Hat Security Advisory: glibc security update

An update for glibc is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

glibc: glibc: Privilege escalation and arbitrary code execution via TOCTOU race condition in dynamic loader

A flaw was found in glibc, specifically within its dynamic loader ld.so. A local attacker can exploit a time-of-check to time-of-use TOCTOU race condition to escalate privileges and execute arbitrary code. This occurs when the dynamic loader expands $ORIGIN in DTRPATH for setuid/setgid programs,...

CVE-2025-31161

🚨 CVE-2025-31161 - Critical Authentication Bypass in CrushFTP CVE-2025-31161 is a critical authentication bypass vulnerability in CrushFTP, a popular Managed File Transfer MFT solution. An unauthenticated remote attacker can impersonate any known user including the default crushadmin administrato...

kernel: dm cache policy smq: fix missing locks in invalidating cache blocks

A flaw was found in the Linux kernel's device-mapper dm cache policy, specifically within the smq module. In passthrough mode, the invalidatemapping operation lacks proper locking, allowing for concurrent access. This can lead to data races, resulting in data corruption or use-after-free issues,...

kernel: procfs: fix missing RCU protection when reading real_parent in do_task_stat()

A flaw was found in the Linux kernel's procfs component. When reading /proc/pid/stat, the dotaskstat function accesses task-realparent without proper Read-Copy-Update RCU protection. This missing protection creates a race condition, which can lead to a Use-After-Free UAF vulnerability. A local...

CVE-2026-61628

A flaw was found in nginx ignition, a user interface for the nginx web server. A remote unauthenticated attacker can exploit a race condition during the initial setup, known as onboarding, to create an administrator account. This vulnerability allows the attacker to gain full administrative contr...

CVE-2026-25278

A flaw was found in Snapdragon. A race condition exists when processing I2C Inter-Integrated Circuit transfer requests, specifically between memory allocation and data copying. This timing vulnerability can lead to memory corruption, allowing a local attacker with low privileges to potentially...

CVE-2026-117618

A flaw was found in Jenkins. The endpoint used to create the first user account does not verify whether the initial setup wizard has completed. This issue leads to a race condition a timing conflict between concurrent operations when the initial user account is being replaced. An unauthenticated...

CVE-2026-117617

A flaw was found in Jenkins. When extracting archived artifacts, Jenkins checks for symbolic links before creating parent directories rather than immediately before writing files, and allows symbolic links in artifacts to replace existing files or empty directories. An authenticated attacker with...

SNEK_Equinox

SNEK Equinox I would like to thank Nightmare-Eclipse for the inspiration not personal from the project UnDefend - https://web.archive.org/web/20260521145157/https://github.com/Nightmare-Eclipse/UnDefend: Now funnily enough, I found a way to lie to the EDR web console to show that defender is up a...

CVE-2026-112110

A time-of-check to time-of-use race condition in the SafeNet Authentication Client SAC SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log directory. This issue affects SAC releases up to an...

EUVD-2026-117621

A time-of-check to time-of-use race condition in the SafeNet Authentication Client SAC SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log directory. This issue affects SAC releases up to an...