CVE-2026-109080

The Flock Night Shift hosted service is vulnerable to a SQL injection flaw within its bulk license plate search functionality. An authenticated user could exploit this by providing a crafted license plate value to access and read data belonging to other customer organizations, specifically licens...

sony-bravia-root-toolkit

sony-bravia-root-toolkit CVE-2019-2215 & DirtyCOW exploit automation + post-root debloat + Magisk modules for Sony BRAVIA KDL-43W800C...

hikvision-unauthenticated-rce-cve-2021-36260

Hikvision CVE-2021-36260 RCE Vulnerability Vulnerability Description An attacker can use this vulnerability to gain complete control of the device with an unrestricted root shell, even if the device owner is limited to a restricted protected shell psh. In addition to compromising IP cameras, they...

CVE-2026-21137

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...

CVE-2026-49060-Lab

CVE-2026-49060 - Hippoo Mobile App for WooCommerce Incorrect Privilege Assignment / Privilege Escalation Executive Summary This repository contains a local Docker lab for reproducing and validating CVE-2026-49060, an Incorrect Privilege Assignment vulnerability affecting the WordPress plugin Hipp...

CVE-2026-21139

The Samsung Continuity Service for Windows is vulnerable to improper access control in versions prior to 4.6.1217.0 . This security flaw allows an adjacent attacker to manipulate a connected mobile device. No specific root cause, exploit details, or remediation steps are provided in the documents...

EUVD-2026-97203

Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device...

CVE-2026-21137

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...

CVE-2026-21137

A path traversal vulnerability exists in Smart Switch prior to version 3.7.73 . This flaw allows physical attackers to access files with Smart Switch privilege . No specific exploit details or remediation steps are provided in the documents.

EUVD-2026-97201

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...

EUVD-2026-97199

Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...

CVE-2026-21135

The Samsung Internet browser, in versions prior to 30.0.5.6 , is affected by an improper access control vulnerability. This flaw allows local attackers to gain unauthorized access to sensitive information . No specific root cause, exploit details, or remediation instructions are provided in the d...

EUVD-2026-97187

Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock...

CVE-2026-21119

The software component lib_sag_ai_sound_sep_v2.00.so is vulnerable to an out-of-bounds read and write condition in versions prior to the SMR Oct-2026 Release 1 . This flaw allows a local attacker to read from and write to memory outside of the intended boundaries. While the specific technical roo...

CVE-2026-21118

An improper access control vulnerability exists in the DownloadProvider component on devices prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to gain unauthorized access to files located within scoped storage . Exploitation details and specific exploit paths are not provided...

EUVD-2026-97182

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...

EUVD-2026-97181

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information...

CVE-2026-21117

An improper access control vulnerability exists in the CocktailBarService on Samsung Mobile devices. This flaw allows local attackers to access sensitive information . The vulnerability is present in versions prior to the SMR Oct-2026 Release 1 . No specific details regarding the root cause or ex...

CVE-2026-44578

🚨 CVE-2026-44578 — Next.js SSRF Vulnerability 📌 Overview CVE-2026-44578 is a high-severity Server-Side Request Forgery SSRF vulnerability affecting self-hosted Next.js applications. Attackers can exploit crafted WebSocket Upgrade Requests to force the server into making outbound requests to...

CVE-2026-108795

A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this issue is some unknown functionality of the file /base/api/systemSettings of the component System Settings API. Performing a manipulation results in improper access controls. The attack can be initiated...