299995 matches found
ALPINE-CVE-2026-76642
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...
util-linux: util-linux: restricted bind mounts do not pin the source, allowing X-mount.owner/group/mode redirection
A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...
useragent v0.0.109
useragent A comprehensive and categorized collection of User Agents. Installation Instructions To install the useragent tool, use the following command: go install -v github.com/projectdiscovery/useragent/cmd/ua@latest Usage To display help for the tool, use the following command: ua -h This will...
CVE-2026-70354
A flaw was found in .NET. This vulnerability, caused by an out-of-bounds write, could allow an unauthorized attacker to execute code locally. Exploitation requires local access and user interaction, but if successful, it can lead to significant impact on the system's confidentiality, integrity, a...
CVE-2026-76642
util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, allowing unprivileged users to execute privileged operations on pre-existing filesystems. Attackers can exploit X-mount.idmap or X-mount.owner hooks to clone filesystems with...
CVE-2026-76175 Multiple vulnerabilities in Ocsreports for OCS Inventory NG
SQL injection vulnerability in the delcheck parameter of the /ocsreports/?function=savequerylist endpoint. Input provided by an authenticated user with operator privileges is incorporated into an SQL query without proper parameterisation or validation, allowing the query to be manipulated and...
CVE-2026-80254
Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...
EUVD-2026-70366
Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...
CVE-2026-80254
ShizenBox2 (edge-app) , a product by se-digital.net, is affected by an authorization bypass caused by a user-controlled key issue. An attacker with valid credentials can exploit this to change another user's password , resulting in a high integrity impact (CVSS v3.0: 6.5 MEDIUM , CVSS v4.0: 7.1 H...
CVE-2026-80254
Authorization bypass through user-controlled key issue exists in ShizenBox2 edge-app. If exploited, an attacker who can log in to the product may change the other user's password...
CVE-2026-62886
A flaw was found in .NET. This vulnerability, caused by an integer overflow or wraparound, allows an unauthorized local attacker to elevate their privileges on the system. This could grant the attacker higher access than intended, potentially leading to further system compromise. Mitigation There...
EUVD-2026-70364
SEPPmail Secure Email Gateway before 15.0.6 deserializes attacker-controlled data in a privileged REST import workflow without adequate validation. An attacker with a privileged API token can execute arbitrary commands with "nobody" privileges...
user-scanner v1.5.1
User Scanner A powerful 2-in-1 OSINT suite engineered for deep Email and Username Intelligence. With 2720+ total scan vectors —including 210+ email-integrated sites and 2510+ username platforms —you can map digital footprints, analyze target behavior, uncover interests, full metadata of usernames...
WordPress GamiPress plugin < 7.9.9.6 - Subscriber+ Arbitrary User Points and Achievement Award vulnerability
Subscriber+ Arbitrary User Points and Achievement Award vulnerability discovered by Shivamani Vastrala in WordPress Plugin GamiPress versions 7.9.9.6...
kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
A flaw was found in the Linux kernel's NFSv4 implementation. A local user could exploit a vulnerability where opening a file with OTRUNC truncate and ORDONLY read-only flags would bypass the necessary write permission checks. This oversight allows an attacker to truncate a file without having...
kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
A flaw was found in the Linux kernel's NFSv4 implementation. A local user could exploit a vulnerability where opening a file with OTRUNC truncate and ORDONLY read-only flags would bypass the necessary write permission checks. This oversight allows an attacker to truncate a file without having...
EUVD-2026-70303
Cheshire Cat AI's GET /memory/collections/collectionid/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can retrieve all users' stored conversation messages and personal data by paginating through the...
CVE-2026-85093 Cheshire Cat AI Memory Collection Endpoint Information Disclosure
Cheshire Cat AI's GET /memory/collections/collectionid/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can retrieve all users' stored conversation messages and personal data by paginating through the...
CVE-2026-85092 LiME through 1.12.0 Arbitrary File Overwrite via Symlink Following
LiME through 1.12.0 fails to validate the disk acquisition output path and does not use ONOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link...
CVE-2026-85093 Cheshire Cat AI Memory Collection Endpoint Information Disclosure
Cheshire Cat AI's GET /memory/collections/collectionid/points endpoint fails to apply per-user filtering when retrieving episodic memory points. Authenticated attackers with MEMORY:READ permission can retrieve all users' stored conversation messages and personal data by paginating through the...