CVE-2026-46242

🚨 CVE-2026-46242 - BadEpoll A high-severity Use-After-Free vulnerability affecting the Linux Kerneleventpoll subsystem that may allow local privilege escalation, memory corruption, or denial of service. 📖 Overview CVE-2026-46242 is a Use-After-Free UAF vulnerability in the Linux Kernel's eventpol...

CVE-2026-123835

In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition...

CVE-2026-111573

Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL allow a local user to execute arbitrary code as SYSTEM by placing scripts in the agent's...

CVE-2026-123835

In JetBrains Datalore versions prior to 2026.4 , a Time-of-check Time-of-use (TOCTOU) race condition during an init script upload allows for code execution within another user's computation. No specific exploit links or remediation details are provided in the documents.

CVE-2026-123835

In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition...

EUVD-2026-118338

In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race condition...

CVE-2026-111573

Checkmk versions <2.5.0p18 , <2.4.0p39 ,

CVE-2026-111573 Privilege escalation via unprotected Windows agent data folder

Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk 2.5.0p18, 2.4.0p39, 2.3.0p52 and 2.2.0 EOL allow a local user to execute arbitrary code as SYSTEM by placing scripts in the agent's...

CVE-2026-123486

WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows attackers to bypass IPN replay protection due to a non-atomic deduplication check and insert. Attackers can concurrently replay a captured valid recurring-payment notification so both...

CVE-2026-123486

The WWBN AVideo software (versions 29.0 through 29.4.0 ) is affected by a race condition vulnerability in the plugin/PayPalYPT/ipn.php component. The root cause is a non-atomic deduplication check and insert , which allows attackers to bypass IPN replay protection. By concurrently replaying a cap...

CVE-2026-123486 WWBN AVideo 29.0 through 29.4.0 Race Condition in PayPal IPN Deduplication via ipn.php

WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows attackers to bypass IPN replay protection due to a non-atomic deduplication check and insert. Attackers can concurrently replay a captured valid recurring-payment notification so both...

EUVD-2026-118286

WWBN AVideo 29.0 through 29.4.0 contains a race condition vulnerability in plugin/PayPalYPT/ipn.php that allows attackers to bypass IPN replay protection due to a non-atomic deduplication check and insert. Attackers can concurrently replay a captured valid recurring-payment notification so both...

ninjasworkout

Damn Vulnerable NodeJS Application Quick Start Download the Repo = run npm i Afer Installing all dependency just run the application node app.js or nodemon app.js ADDED BUGS Prototype Pollution ✅1 No SQL Injection ✅2 Cross site Scripting ✅3 Broken Access Control ✅4 Broken Session Management ✅5 We...

kernel security update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

keycloak-services: keycloak-services: Account takeover via authentication race using reset-credentials path

A flaw was found in the authentication session handling of the keycloak-services component in Keycloak. The issue occurs because the system fails to verify if an authenticator is valid for the current authentication flow when switching between the standard authentication path and the reset...

Learn-about-cve-2025-31133-poc

Learn-about-cve-2025-31133-poc Overview A proof-of-concept demonstration and learning environment for CVE-2025-31133 , a security vulnerability in runc that allows bypassing maskedPaths protection through a race condition. maskedPaths are designed to prevent containers from accessing sensitive ho...

WannaRace

🚀 WannaRace WebApp intentionally made vulnerable to Race Condition 🤖 Description Race Condition vulnerability can be practiced in the developed WebApp. Task is to buy a Mega Box using race condition that costs more than available vouchers. Two challenges are made for practice. Challenge B is to b...

CVE-2026-92694

A flaw was found in FastNetMon. A remote attacker could trigger a race condition—a timing conflict where multiple operations access shared data simultaneously—resulting in a Denial of Service DoS. When processing network traffic within monitored IPv6 ranges, the application updates internal traff...

CVE-2026-112938

A flaw was found in filelock. A local attacker with write access to a shared directory can exploit a timing race condition to substitute a lock directory with a symbolic link. This flaw primarily allows an attacker to cause a Denial of Service DoS by stranding lock files in other lock locations,...

CVE-2026-121961

A flaw was found in FreeRDP. A malicious or compromised Remote Desktop Protocol RDP server can trigger a race condition by repeatedly requesting the creation of an already active dynamic virtual channel while client data is concurrently processed. This issue leads to a use-after-free condition,...