CVE-2026-103475 yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

CVE-2026-103475 yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

CVE-2026-103475 yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

EUVD-2026-90206

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

Exploit for CVE-2026-76570

CVE-2026-76570 — JCTables comjctables unauthenticated SQL r...

CVE-2026-47582

A flaw was found in the NVIDIA GPU Display Driver for Windows kernel module. A local attacker with basic user privileges can trigger an out-of-bounds write vulnerability in the driver. A successful exploit could allow the attacker to achieve arbitrary code execution, escalate privileges, tamper...

CVE-2026-47537

A flaw was found in the NVIDIA GPU display driver. An out-of-bounds write vulnerability in the kernel mode layer allows a local privileged attacker to corrupt system memory. Successful exploitation can lead to arbitrary code execution, privilege escalation, or a Denial of Service DoS, as well as...

CVE-2026-47523

A flaw was found in the NVIDIA GPU display driver. A local user with low privileges can trigger an out-of-bounds write memory error in the kernel mode layer. Successful exploitation could lead to privilege escalation and arbitrary code execution with kernel permissions, cause a Denial of Service...

CVE-2026-47529

A flaw was found in the NVIDIA GPU display driver. A local attacker with administrative privileges can trigger an out-of-bounds write in the driver's kernel mode layer. Successful exploitation could lead to arbitrary code execution, privilege escalation, data tampering, information disclosure, or...

CVE-2026-47556

A flaw was found in the NVIDIA GPU display driver. A local unprivileged user can trigger an integer overflow in the driver's kernel mode layer, leading to an out-of-bounds memory write. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, cause a denial ...

CVE-2026-47561

A flaw was found in the NVIDIA GPU display driver. A local, unprivileged user can exploit this vulnerability by submitting an input/output control ioctl request with an unvalidated buffer size to the driver's kernel layer. This causes an out-of-bounds write in kernel memory, which may allow the...

CVE-2026-93144

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. The checkptrtobtfaccess function, which is responsible for validating memory access through BPF Type Format BTF pointers, incorrectly allowed certain program-type callbacks to bypass the intended read-only policy for...

CVE-2026-93112

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. The bpfcpumaskpopulate function incorrectly allows writing to a read-only memory region by accepting borrowed cpumask pointers as writable destinations. This could allow a local attacker to cause a denial of service or...

CVE-2026-55176 Soft Machine: Cross-tenant workspace API auth bypass via shared `CONTAINER_SHARED_SECRET` bearer token

Soft Machine is a Virtual Machine–based agentic development environment / Cloud OS. In versions 0.2.247 and prior, two authentication helpers in /app/server.js — verifyContainerAuth and authenticateWorkspaceHttp — accept the global CONTAINERSHAREDSECRET as a bearer token without verifying which...

DEBIAN-CVE-2026-47595

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...

CVE-2026-47596

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved. A successful exploit of this vulnerability might lead to code execution and escalation of privileges...

DEBIAN-CVE-2026-47596

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved. A successful exploit of this vulnerability might lead to code execution and escalation of privileges...

CVE-2026-47593

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, and denial of service...

CVE-2026-47595

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved. A successful exploit of this vulnerability might lead to code execution, escalation of privileges,...

CVE-2026-47591

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could bypass read-only memory protection due to incorrect authorization, enabling write access to memory marked read-only. A successful exploit of this vulnerability might lead to code...