iOS26.6-CVE-2026-65343

CVE-2026-65343 — AppleKeyStore OOB Read KASLR Defeat Component: AppleKeyStore kernel extension — LibSerSEPControlDeserialize Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds read in SEP control message deserialization Impact: Kernel pointer lea...

CVE-2026-56718

CVE-2026-56718 Unauthenticated path traversal in jdbhttpd/0.1.0 AJCloud AJY IPC firmware allowing remote reading of arbitrary files as root, including cleartext RTSP credentials. CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory Severity: CVSS 4.0 - 8.7 High Affected: AJClou...

CVE-2026-85769

CVE-2026-85769 Heap out-of-bounds read in libtpms TPM 2.0 volatile-state deserialization. An unbounded optional-block skip in blockskipread advances the unmarshal cursor by an attacker-controlled 16-bit length and drives the signed remaining-size counter negative. Every downstream bounds check th...

CVE-2026-37070

CVE-2026-37070 Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allows an authenticated attacker to read any uploaded files by other users as long as it knows the path and filename via a specially crafted GET request to the affected endpoint...

CVE-2021-41773-POC

تقرير إعادة إنتاج ثغرة CVE-2021-41773 نظرة عامة على الثغرة CVE ID : CVE-2021-41773 اسم الثغرة : ثغرة اجتياز المسار في Apache HTTP Server مستوى الخطورة : مرتفع CVSS 7.5 الإصدارات المتأثرة : Apache HTTP Server 2.4.49 وصف الثغرة : يحتوي الإصدار 2.4.49 من Apache HTTP Server على خلل في تنفيذ دالة تطبي...

EUVD-2026-71748

An incomplete list of disallowed inputs in the SQL validation component in Amazon awslabs postgres-mcp-server before version 1.1.7 might allow an unauthenticated actor to modify data beyond the read-only scope by placing crafted SQL into the content that is submitted when an authenticated user...

tomcatfileread

CVE-2020-1938 Tomcat File Read / File Include Ghostcat — python3 CVE-2020-1938 CNVD-2020-10487 Tomcat AJP 协议文件读取 / 文件包含漏洞利用 POC 的 python3 转换版 。 原版（python2）作者: ydhcui — https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi 用法 root@kitploit: python3 "Tomcat-ROOT路径下文件包含CVE-2020-1938-python3.py" -...

WordPress WP File Download plugin <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' Parameter vulnerability

Authenticated Subscriber+ Arbitrary File Read via Path Traversal in 'remoteurl' Parameter vulnerability discovered by 0xd4rk5id3 - EnvoraSec in WordPress Plugin WP File Download versions = 6.3.8...

CVE-2026-85769

A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state for example during a virtual machine's power-on or state/migration restore, a malformed state blob can supply an oversized skip-block length that is not validated against the remaining si...

AZL-99525 CVE-2026-80904 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: net/tls: Fail tlsswspliceread after a failed async decrypt When an async decrypt fails, tlsdecryptdone records the error in ctx-asyncwait.err and calls tlserrabort, which stores it in skerr. tlsswrecvmsg and tlsswreadsock each re...

EUVD-2026-60970

CodeWhale: Argument Injection in gitblame Tool Allows Arbitrary File Read Without Approval...

EUVD-2026-60966

CodeWhale: Project config instructions override enables arbitrary file read into AI system prompt via cloned repository...

CVE-2024-23897

CVE-2024-23897 — PoC يدعم HTTPS + CSRF-crumb cve-2024-23897-crumb.py — قراءة ملفات عشوائية غير مصادق عليها ضد Jenkins = 2.441 / LTS = 2.426.2 تم الإصلاح في 2.442 / LTS 2.426.3. ما الجديد الذي يضيفه هذا على PoCs العامة إن PoCs المستخدمة على نطاق واسع — exploit-db 51993، xaitax/CVE-2024-23897، و قا...

CVE-2026-23751-poc

CVE-2026-23751-PoC Proof-of-concept implementation of the .NET HTTP Remoting technique described in Code White's NewRemotingTricks, targeting Tungsten Automation Kofax Capture. CVE-2026-23751 Title: Tungsten Automation Kofax Capture Unauthenticated File Read/Write and Command Execution via .NET...

CVE-2026-85769

A heap out-of-bounds read in libtpms (software TPM 2.0 emulation, commonly deployed via swtpm in virtual machines) occurs during TPM 2.0 volatile-state restoration. An attacker-controlled oversized skip-block length in block_skip_read() drives a signed size counter negative; a subsequent signed-t...

CVE-2026-85769 Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize

A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state for example during a virtual machine's power-on or state/migration restore, a malformed state blob can supply an oversized skip-block length that is not validated against the remaining si...

EUVD-2026-71627

A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state for example during a virtual machine's power-on or state/migration restore, a malformed state blob can supply an oversized skip-block length that is not validated against the remaining si...

CVE-2026-85769 Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize

A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state for example during a virtual machine's power-on or state/migration restore, a malformed state blob can supply an oversized skip-block length that is not validated against the remaining si...

CVE-2026-85769

A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state for example during a virtual machine's power-on or state/migration restore, a malformed state blob can supply an oversized skip-block length that is not validated against the remaining si...

ESCepcion

🛡️ ESCepcion Active Directory Certificate Services Auditor ESCepcion is an open-source tool for auditing and assessing vulnerabilities in Active Directory Certificate Services AD CS infrastructures. It is designed to automate the detection of privilege escalation paths ESC with a strict focus on...