Forklift_LPE

Forklift 3.3.9 Escalation dei Privilegi Locali Quando si installa Forklift, un nuovo helper chiamato com.binarynights.ForkLiftHelper per Mac OS X viene automaticamente installato nella directory /Library/PrivilegedHelperTools/. Analizzando questo helper, che gestisce messaggi XPC, sono emersi...

Rejetto-HFS-2.x-RCE-CVE-2024-23692

Une SSTI non authentifiée dans le Rejetto HTTP File Server HFS. PoC du découvreur original : https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ Testé sur les versions : 2.4.0 RC7, 2.3m Exemple d'utilisation : root@kitploit: msf6 use...

optee-qemu

CVE-2021-44733: Fuzzing e sfruttamento di una use-after-free nel sottosistema TEE del kernel Linux Recentemente è stata scoperta una vulnerabilità use-after-free nel sottosistema TEE del kernel Linux, fino alla versione 5.15.11 inclusa, alla quale è stato assegnato l'ID CVE-2021-44733 1. A prima...

CVE-2025-13595

CIBELES AI = 1.10.8 - बिना प्रमाणीकरण के मनमाना फ़ाइल अपलोड Cibeles AI WordPress प्लगइन के संस्करण 1.10.8 और उससे नीचे में actualizadorgit.php फ़ाइल में एक बिना प्रमाणीकरण वाली रिमोट कोड निष्पादन भेद्यता मौजूद है। यह फ़ाइल बिना किसी प्रमाणीकरण या प्राधिकरण जांच के HTTP के माध्यम से सीधे एक्सेस की...

CVE-2026-78981

Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to potentially obtain sensitive information via a local program. Chromium security severity: Low...

EUVD-2026-66081

Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to potentially obtain sensitive information via a local program. Chromium security severity: Low...

CVE-2026-78981

CVE-2026-78981 is an information leak in the Mobile component of Google Chrome on iOS , affecting versions prior to 152.0.7977.65 . A local attacker can potentially obtain sensitive information via a local program. Chromium rates the severity as Low , while NVD assigns a CVSS 3.1 score of 6.5 (ME...

CVE-2026-78981

Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to potentially obtain sensitive information via a local program. Chromium security severity: Low...

CVE-2026-78981

Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to potentially obtain sensitive information via a local program. Chromium security severity: Low...

EUVD-2026-65978

Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-79245

CVE-2026-79245 is a use-after-free vulnerability in the UI component of Google Chrome , affecting versions prior to 152.0.7977.65 . The flaw allows a local attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox via a local program. The CVSS v3.1 sc...

CVE-2026-79245

Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-79245

Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-79245

Use after free in UI in Google Chrome prior to 152.0.7977.65 allowed a local attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-78892

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access restrictions via a local program. Chromium security severity: Medium...

EUVD-2026-65956

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access restrictions via a local program. Chromium security severity: Medium...

CVE-2026-78892

Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.65 allowed a local attacker to bypass system access restrictions via a local program. Chromium security severity: Medium...

CVE-2026-78892

CVE-2026-78892 is an incorrect authorization vulnerability in Chromoting , a component of Google Chrome on Windows . Affected versions are prior to 152.0.7977.65 . A local attacker can exploit this flaw to bypass system access restrictions through a local program, potentially elevating privileges...

[SECURITY] [DSA 6466-1] linux security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6466-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 25, 2026 https://www.debian.org/security/faq -...

smartermail-cve-scanner

Scanner SmarterMail CVE-2025-52691 Vulnerabilità RCE CVSS 10.0 in SmarterMail. Il tuo server di posta è vulnerabile? Scanner rapido e accurato per CVE-2025-52691 - una vulnerabilità critica di caricamento arbitrario di file senza autenticazione che consente l'esecuzione remota di codice sui serve...