CVE-2026-43689

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, visionOS 27. A malicious app may be able to gain root privileges...

CVE-2026-64701

CVE-2026-64701 is a permissions issue in macOS that was addressed with additional restrictions. The vulnerability allows a malicious app to potentially gain root privileges , constituting a high-impact local privilege escalation. The issue is fixed in macOS Sequoia 15.7.8 and macOS Tahoe 26.6 . C...

CVE-2026-43691

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...

CVE-2026-43783

A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges...

CVE-2026-65362

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...

CVE-2026-84622

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app with root privileges may be able to read...

CVE-2026-84622

CVE-2026-84622 is a memory initialization flaw in Apple's kernel that allows an app with root privileges to read uninitialized kernel memory . The issue was addressed with improved memory handling and is fixed in iOS 26.7 / iPadOS 26.7 , iOS 27 / iPadOS 27 , macOS Golden Gate 27 , macOS Sequoia 1...

EUVD-2026-78012

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...

CVE-2026-64712

This issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...

CVE-2026-76461

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...

EUVD-2026-77625

A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to insufficient validation in the email...

Astra Linux – Vulnerability in Samba

The Samba vfsfruit module utilizes extended file attributes EA, xattr to enhance compatibility with Apple SMB clients and interoperability with Netatalk 3 AFP file servers. Samba versions prior to 4.13.17, 4.14.12, and 4.15.5, when vfsfruit was configured, allowed out-of-bounds heap read and writ...

Astra Linux – Vulnerability in docker.io-app

Moby is an open-source container framework. In versions prior to 29.5.1, as well as in moby/moby v2 before v2.0.0-beta.14, when a compressed archive was uploaded to a container via PUT /containers/id/archive or piped through docker cp -, the daemon would resolve the decompression binaries such as...

PT-2026-91736

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges UID=0 on the Langflow server by submitting components containing socket or urllib imports. This enables: 1 AWS credential theft via IMDSv1 SSRF with full IAM role permissions, 2 arbitra...

PT-2026-91270

🚨 CVE-2026-76461 — Cisco Secure Email Gateway, root RCE via crafted email What broke: Cisco's Secure Email Gateway AsyncOS software parses every incoming email to scan and route it. That parsing logic didn't properly validate message content before it got used in a database query — a classic SQL...

PT-2026-91485

I don’t know much about the behind-the-scenes making of jailbreaks with the coding etc. I know CVE’s are only part of it, but does anyone think this could be used to make a jailbreak for anything for iOS 26 with the exception of 26.7-27 where it was patched considering it could allow root...

PT-2026-91498

A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be able to gain root privileges...

PS5-IPV6-Kernel-Exploit

PS5 3.xx / 4.xx Kernel Exploit Resumen Este repositorio contiene una implementación experimental de ROP en WebKit de un exploit de kernel para PS5 basado en el Use-After-Free UAF de IPV6 de TheFlow , que fue reportado en HackerOne. La estrategia del exploit se basa en gran parte en el PoC de...

CVE-2023-46805

Título: Prueba de Concepto para CVE-2023-46805 - Solo para Fines Educativos Licencia: Este trabajo se encuentra bajo la Licencia Creative Commons Attribution 4.0 International CC BY 4.0. Eres libre de compartir, copiar, distribuir y transmitir este trabajo, de adaptarlo o utilizarlo para otros...

CVE-2024-41628

CVE-2024-41628 Script de exploit simple desarrollado por Redshift Cyber Security para explotar la vulnerabilidad LFI de ClusterControl CVE-2024-41628. La vulnerabilidad afecta a la API de CMON y específicamente a las interfaces de usuario RPC y RPC-TLS, que por defecto residen en los puertos 9500...