CVE-2020-15052

CVE-2020-15052 : Artica Proxy before 4.28.030418 Community Edition allows SQL Injection. Product Description: Artica Tech offers a powerful but simple-to-use solution, usually the preserve of Large and Multinational companies. With a starting price of just 99€ and more than 62 000 active servers,...

CVE-2020-24089

CVE-2020-24089 Windows Privilege Escalation An issue was discovered in ImfHpRegFilter.sys in IOBit Malware Fighter version 8.0.2, allows local attackers to cause a denial of service DoS. CVE Link - https://vulners.com/cve/CVE-2020-24089...

CVE-2026-113496

A flaw was found in cockpit-machines. When saving Virtual Network Computing VNC console settings, the configured password is passed directly as a command-line argument to an underlying system utility. A local unprivileged attacker on a host that allows cross-user process inspection could read the...

CVE-2026-113388

A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the component Cache Settings. Performing a manipulation of the argument host/port/username/password/type/status results in code...

CVE-2025-54897-LAB

Lab: CVE-2025-54897 - Deserialization Vulnerability in Microsoft Office SharePoint 🚀 Overview This lab demonstrates a deserialization vulnerability in Microsoft Office SharePoint that enables remote code execution RCE. The issue arises from improper handling of untrusted serialized data within...

CVE-2023-44487-dos

CVE-2023-44487 HTTP/2 Rapid Reset There are some examples in this repo which are not tested completely to analyse the impact, but I just wanted to perform the concept of this attack starting many streams and immediately sending RSTSTREAM frame to avoid reaching MAXCONCURRENTSTREAMS. I use H2Space...

RLSA-2026:84595 Moderate: cockpit-files security update

A filesystem browser for Cockpit Security Fixes: cockpit-files: cockpit-files: Arbitrary file ownership change via symlink following in privileged paste CVE-2026-91202 cockpit-files: cockpit-files: Local attacker can hijack file ownership via symlink race CVE-2026-91205 For more details about the...

EUVD-2026-104968

A vulnerability was detected in DrayTek Vigor2960 1.5.1.6 Revision 8218. Affected by this vulnerability is the function settable of the file /cgi-bin/mainfunction.cgi of the component CGI Process. The manipulation of the argument sectiontype results in command injection. The attack may be launche...

CVE-2026-38698-and-CVE-2026-38699

Research on Wyze Cam Pan v3 Slides Reference CVE-2026-38698 Attack Name Heap Overflow on tutkpacketalloc function in tutkavserver Additional Details Afftected product TUTK SDK v.3.1.10.0 through v.4.3.8.1 Affected Component tutkpacketAlloc function Attack Vector An authenticated attacker must sen...

tomcat: tomcat: Unauthorized socket access via TOCTOU race condition

A flaw was found in Apache Tomcat. A local attacker can gain unauthorized access to Unix domain communication sockets due to a time-of-check to time-of-use TOCTOU race condition in the APR/Native connector. When the connector initializes a socket, a brief timing window exists before restrictive...

tomcat: tomcat: Authentication bypass via non-GSSAPI SASL in JNDI realm

A flaw was found in Apache Tomcat. When the Java Naming and Directory Interface JNDI realm is configured with a non-Generic Security Service Application Program Interface GSSAPI Simple Authentication and Security Layer SASL mechanism, a missing verification step allows an attacker to bypass...

CVE-2026-113388 opensource-socialnetwork Cache Settings dynamic.php input code injection

A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the component Cache Settings. Performing a manipulation of the argument host/port/username/password/type/status results in code...

EUVD-2026-104967

A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the component Cache Settings. Performing a manipulation of the argument host/port/username/password/type/status results in code...

CVE-2026-113388

A code injection vulnerability exists in opensource-socialnetwork versions up to 9.11/10.1 . The flaw resides in the Cache Settings component, specifically within the input function of the actions/administrator/cache/dynamic.php file. By manipulating the host , port , username , password , type ,...

CVE-2026-92515

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. This vulnerability occurs because the btffindstructfield function incorrectly initializes a fresh 'seen mask' during recursive descent, allowing duplicate fields in nested structures. A local attacker can exploit this by...

CVE-2026-90430

A flaw was found in the Linux kernel's iommu/tegra241-cmdqv component. A local attacker could potentially trigger a system crash, leading to a Denial of Service DoS. This occurs because a pointer to a command queue vcmdq is stored before it is fully initialized. If an error is encountered during...

Learn.BlueJam

BlueJam KNOB Attack With KNOB your Bluetooth speakers can be monitored for iPhone and Android use. The first way you can do this is to step up the KNOB attack. The second is to let the KNOB attack decrypt or weaken Bluetooth traffic between the two devices. By doing this, you will have an...

CVE-2026-90396

A flaw was found in the Linux kernel's block direct I/O DIO subsystem. When an integrity mapping fails during direct I/O operations, a reference to the direct I/O resource is not properly released. This resource leak could potentially be exploited by a local attacker, leading to a denial of servi...

CVE-2026-113351

A flaw was found in expat. This vulnerability allows a remote attacker to cause a Denial of Service DoS by submitting a large XML document to an application that reuses parser instances. When the XML parser is reset using XMLParserReset, it clears the direct byte count but fails to offset tracked...

CVE-2026-93047

A flaw was found in the drm/v3d component of the Linux kernel. An implicit synchronization issue in the v3dsubmitlockreservations function could lead to a job reading a Buffer Object BO while another process is still writing to it. This could result in data corruption. A local attacker could...