EUVD-2026-91044

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution...

CVE-2026-103484

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution...

obsidian-note-toolbar-PoC

Ejecución de Código Arbitrario Dirigida por Frontmatter en Note Toolbar mediante la Cadena de Variables propNAME → js: Estado del CVE: solicitado, pendiente de asignación. Este hallazgo se publica como GHSA-q8cw-3m8c-5pf2. Tras la asignación del CVE, este repositorio se renombra a...

CVE-2026-0303

Ejecución de Código Arbitrario en Checkov CVE-2026-0303 CVE: CVE-2026-0303 | CVSS Base: 6.3 | Severidad: Baja CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H CVE-2026-0303 - Vulnerabilidad de ejecución de código arbitrario en Checkov. Publicado por Palo Alto Networks el 9 de...

CVE-2026-8618

A stack-based buffer overflow vulnerability exists in the TDDPv2 service /usr/bin/tddp on Deco M9 Plus due to insufficient validation of decrypted request data length before it is copied into a fixed-size stack buffer in the subtype 0x91 handler. Successful exploitation may allow an adjacent,...

CVE-2026-7669-PoC

CVE-2026-7669 SGLang sobrescribe silenciosamente trustremotecode=False a True y vuelve a invocar AutoTokenizer.frompretrained cada vez que transformers v5 devuelve un objeto TokenizersBackend. Un modelo con un tokenizerclass personalizado y un automap que apunte a tokenizer.py alcanza la ejecució...

Pluck-CMS-Stored-XSS---Installation

Pluck CMS 4.7.18 XSS Almacenado Autor: Sergio Descripción: Múltiples vulnerabilidades de Cross-Site Scripting XSS en la instalación de PluckCMS v.4.7.18 permiten a un atacante local ejecutar código arbitrario mediante un payload manipulado inyectado en los parámetros cont1 y cont2 durante el...

CVE-2024-44346

Divulgación de CVE: CVE-2024-44346 Fecha: 13-09-2024 Resumen Se identificó una vulnerabilidad en Tosibox tbsetup.exe versión 4.0.0.0, que podría permitir una escalada de privilegios local. A este problema se le ha asignado el identificador CVE-2024-44346. El proveedor ha publicado un aviso con má...

[SECURITY] [DSA 6536-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6536-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 01, 2026 https://www.debian.org/security/faq -...

cve-2025-59489

Herramienta de Detección de Vulnerabilidad Unity CVE-2025-59489 Herramienta de detección automatizada de vulnerabilidades de inyección en Unity Runtime, diseñada específicamente para plataformas de juegos Android. Resumen de la Vulnerabilidad ID CVE : CVE-2025-59489 Puntuación CVSS : 8.4 Alta...

CVE-2026-23744-Remote-Code-Execution-POC

CVE-2026-23744 - MCPJam inspector Remote-Code-Execution: Prueba de Concepto POC MCPJam inspector 3. Ejecute el exploit python3 exploit.py...

Dissecting-CVE-2026-0628-Chromium-Extension-Privilege-Escalation

= doi.org/10.5281/zenodo.18413764 = orcid.org/0009-0007-7728-256X README.md CVE-2026-0628: Escalada de Privilegios en Chromium WebView Suplantación de Origen – Investigación Técnica y Prueba de Concepto Autor: Sastra Adi Wiguna Purple Elite Teaming Fecha de Investigación: Enero 2026 ID CVE:...

CVE-2026-47532

A flaw was found in nvidia-driver. A local user with administrative privileges can trigger an out-of-bounds write vulnerability in the driver's kernel mode layer. Successful exploitation may lead to arbitrary code execution, privilege escalation, data tampering, information disclosure, or a Denia...

CVE-2026-47547

A flaw was found in the NVIDIA GPU display driver firmware. Due to improper input validation, a local attacker with elevated privileges can send crafted input to the firmware. Successful exploitation may lead to arbitrary code execution, privilege escalation, or a denial of service DoS...

CVE-2026-47543

A flaw was found in nvidia-driver. The driver's kernel mode layer fails to properly validate input, allowing a local attacker with administrative privileges to supply crafted input. Successful exploitation can lead to arbitrary code execution, privilege escalation, denial of service DoS,...

CVE-2026-47542

A flaw was found in the NVIDIA GPU display driver. A local attacker with high privileges can trigger this vulnerability by supplying crafted input to the kernel-mode driver layer due to improper input validation. A successful exploit may allow the attacker to achieve arbitrary code execution,...

CVE-2026-47538

A flaw was found in the NVIDIA GPU display driver. A local attacker with elevated privileges can trigger an out-of-bounds write vulnerability within the device firmware. Successful exploitation could allow the attacker to execute arbitrary code, escalate privileges, cause a denial of service DoS,...

CVE-2026-47522

A flaw was found in the NVIDIA GPU display driver. Improper input validation within the kernel mode layer allows an authenticated local attacker with elevated privileges to trigger unintended behavior. A successful exploit may lead to arbitrary code execution, denial of service DoS, privilege...

EUVD-2026-91006

A stack-based buffer overflow vulnerability exists in the TDDPv2 service /usr/bin/tddp on Deco M9 Plus due to insufficient validation of decrypted request data length before it is copied into a fixed-size stack buffer in the subtype 0x91 handler. Successful exploitation may allow an adjacent,...

CVE-2026-8618

A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on the Deco M9 Plus . The root cause is insufficient validation of the length of decrypted request data before it is copied into a fixed-size stack buffer within the subtype 0x91 handler . An adjacent, unauth...