CVE-2026-0827

CVE-2026-0827 LdeApi.Server.exe प्रक्रिया बिना प्रतिरूपण के C:\ProgramData\Lenovo\LDE\SYSTEM में MP27AM7Westimation.json लिखने का प्रयास करती है। यह निर्देशिका डिफ़ॉल्ट रूप से मौजूद नहीं है। चूंकि C:\ProgramData\ सामान्य उपयोगकर्ताओं को उपनिर्देशिकाएँ बनाने की अनुमति देता है, इसलिए एक...

CVE-2021-36934-export-shadow-volume-POC

CVE-2021–36934 प्राप्त हैश का उपयोग PTH और टिकट जैसी जालसाजी के लिए किया जाता है। यहाँ कोई विस्तृत विश्लेषण नहीं है। इसके अलावा, यह देखते हुए कि अधिकांश सिस्टम फ़ाइलों तक पहुँच अधिकार प्राप्त किए जा सकते हैं, शोषण के एक से अधिक तरीके होने चाहिए, जिनमें Microsoft के अधिकारी भी शामिल हैं, जिन्होंने...

LocalPotato_CVE-2023-21746

A local privilege escalation LPE vulnerability in Windows was reported to Microsoft on September 9, 2022, by Andrea Pierini @decoderit and Antonio Cocomazzi @splintercode. The vulnerability would allow an attacker with a low-privilege account on a host to read/write arbitrary files with SYSTEM...

CVE-2024-24919

CVE-2024-24919 Exploit Panoramica Questo repository contiene un exploit proof-of-concept PoC per CVE-2024-24919, una vulnerabilità critica scoperta in Check Point SVN. La vulnerabilità consente la lettura di file di sistema. ID CVE : CVE-2024-24919 Gravità : Critica Indice Dettagli della...

CVE-2025-43537

CVE-2025-43537 Credito di Sicurezza Apple Ricercatore: Al Sadman Awal Accreditato ufficialmente da Apple Product Security per la divulgazione responsabile di CVE-2025-43537. Panoramica CVE-2025-43537 è una vulnerabilità di sicurezza identificata durante una ricerca di sicurezza indipendente e...

CVE-2024-4956

CVE-2024-4956 - Path Traversal non autenticato in Nexus Repository Manager 3 Nexus Repository Manager è un gestore di repository che organizza, memorizza e distribuisce gli artefatti necessari per lo sviluppo. È stata scoperta una vulnerabilità di path traversal in Nexus Repository 3, nelle...

GL.iNet <= 4.3.7 - Arbitrary File Write

GL.iNet = 4.3.7 is vulnerable to an arbitrary file write exploit, allowing an attacker to overwrite arbitrary system files. id: CVE-2023-46455 info: name: GL.iNet = 4.3.7 - Arbitrary File Write author: Zierax severity: high description: | GL.iNet = 4.3.7 is vulnerable to an arbitrary file write...

SparstanBoogie

SparstanBoogie’s Ursprünge wurden Berichten zufolge auf iOS/iPadOS 15.2 – 16.7 RC 20H18 und 17.0 getestet, allerdings wurden Tests bis zu 26.1 26.1 sind. Auch Tests auf Geräten oberhalb oder unterhalb der gemeldeten Versionen sind willkommen, da es auf neueren Geräten möglicherweise wieder...

CVE-2026-78212 4MOSAn Security Technology｜4MOSAn Management Center - Arbitrary File Read

4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files...

MAL-2026-13770 Malicious code in @telekom-ods/react-ui-kit (npm)

@telekom-ods/[email protected] ships an install hook that spawns a shell running a reconnaissance/exfiltration one-liner. The captured command reads /etc/passwd and /etc/hosts, runs id, and conditionally reads /etc/shadow if the process has read access, then sends the collected output as the...

MAL-2026-13398 Malicious code in @xiaohhhh1/canvas-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a34add291ef7584aec7041449cb2e80d36ae98f93c2725e1aa018707e3334119 On bin start, @xiaohhhh1/canvas-agent opens an outbound WebSocket to the hardcoded relay wss://canvas.xiaohhhh1.com/api/agent-relay and treats inboun...

Exploit for Path Traversal in Stitionai Devika

CVE-2024-40422 Python implementation...

CVE-2026-64458

A flaw was found in the Linux kernel's Data Access MONitor DAMON subsystem. A local user with write permissions to the system file system sysfs can exploit this vulnerability by configuring extreme zero or excessively high monitoring intervals. This improper handling of interval values can lead t...

EUVD-2026-48865

In the Linux kernel, the following vulnerability has been resolved: pinctrl: meson: amlogic-a4: fix deadlock issue Accessing the pinconf-pins sysfs node may deadlock. pinconfpinsshow holds pctldev-mutex, and the platform driver calls pinctrlfindgpiorangefrompin, which tries to acquire the same...

SUSE CVE-2026-64213

In the Linux kernel, the following vulnerability has been resolved: hwmon: lm90 Add lock protection to lm90alert Sashiko reports: lm90alert executes in the smbus alert context and calls lm90updateconfreg to disable the hardware alert line, without acquiring hwmonlock. Concurrently, sysfs write...

CVE-2026-64213

CVE-2026-64213 concerns the Linux kernel hwmon lm90 driver. The issue arises because lm90_alert() runs in the SMBus alert context and disables the hardware alert line via lm90_update_confreg() without acquiring hwmon_lock. Meanwhile, sysfs write paths (e.g., lm90_write_convrate) hold hwmon_lock a...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...

dotnet: .NET: Local tampering via improper link resolution

A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...

EUVD-2026-45870

In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update failure When sysfsupdategroup is called for a named group and createfiles fails e.g. -ENOMEM, internalcreategroup calls kernfsremovekn on the group directory. In the update path, k...

EUVD-2026-45606

In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Fix use-after-free in path file creation cleanup In the error path of rtrssrvcreatepathfiles, the sysfs root folders may already have been created and srvpath-kobj may already have been initialized. If a later step...