CVE-2026-93226

A flaw was found in the Linux kernel's IPv6 networking subsystem. A race condition occurs when reading route exception lists without proper synchronization against concurrent route updates. A local user can trigger this flaw by querying network routing tables during simultaneous route updates,...

CVE-2026-93206

A flaw was found in the Linux kernel. This vulnerability allows an unprivileged local attacker to bypass security restrictions. By obtaining a file descriptor from a privileged process, the attacker can read the entire Peripheral Component Interconnect PCI configuration space, which could lead to...

CVE-2026-90019

A flaw was found in the Linux kernel. A null pointer dereference can occur in the usbputfunctioninstance function within the USB gadget subsystem. This issue arises because a file descriptor fd is not allocated before being dereferenced in an error path, which can lead to a system crash. A local...

CVE-2026-89874

A flaw was found in the Linux kernel's v4l2-async media subsystem. When creating ancillary media links, the v4l2asyncmatchnotify function attempts to delete an unlinked entry if the link creation fails. This can lead to a null pointer dereference, potentially causing a system crash. A local...

CVE-2026-89808

A flaw was found in the drm/amdkfd component of the Linux kernel. During virtual memory VM migration, if a VM range is a 'hole' on the CPU side, an uninitialized variable is used. This can cause the system to drop all Video Random Access Memory VRAM, potentially leading to a denial of service or...

CVE-2025-50675-GPMAW-Permissions

CVE-2025-50675 – Insecure Permissions in GPMAW 14.2 Summary CVE-2025-50675 affects GPMAW 14.2, a bioinformatics software developed by Lighthouse Data. The installer creates the folder C:\Program Files\gpmaw with full control granted to the 'Everyone' group , allowing any local user to modify file...

CVE-2026-98499

A flaw was found in the Linux kernel's Wacom Human Interface Device HID driver. When processing a device report descriptor with mismatched usage and count configurations, the driver can calculate an invalid memory offset and perform an out-of-bounds read beyond the allocated report buffer. A loca...

CVE-2026-96234

A flaw was found in .NET. An origin validation error allows an unauthorized remote attacker to disclose sensitive information over the network. Successful exploitation requires user interaction and enables an attacker to access restricted data without proper authorization...

CVE-2026-96990

A flaw was found in Apache Thrift's Erlang bindings. A remote, unauthenticated attacker could exploit this vulnerability by sending requests that trigger excessive resource allocation without proper limits or throttling. This issue can lead to resource exhaustion, resulting in a Denial of Service...

CVE-2026-96287

A flaw was found in the Apache Thrift Perl bindings. A remote attacker could exploit this vulnerability by sending specially crafted input to an application using the affected bindings. This triggers inefficient data processing, leading to excessive resource consumption and a Denial of Service Do...

LLM-Attack-Prompt

LLM-Attack-Prompt A comprehensive collection of Large Language Model LLM attack techniques, prompts, and security research materials. This repository serves as a centralized resource for understanding and studying various methods used to exploit or bypass LLM safety mechanisms. The latest large...

UNIX Hard Link

Overview Affected versions of this package are vulnerable to UNIX Hard Link via OsFiles.overwrite in SoftReadWriteLock, which refreshes holder records by name without verifying the file identity. A local attacker who has rename access to the lock directory can replace a holder record with a named...

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the lock file open logic in api.py and related platform backends, where an existing lock file's permissions are not preserved on Unix systems. An attacker with local access can observe the file mode applied to a newly...

CVE-2024-32399

CVE-2024-32399 Vulnerability Overview Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component Vulnerability Type Directory Traversal Vendor of Product RaidenMAILD Mail Server Affected...

CVE-2022-46169

CVE-2022-46169 Setup git clone https://github.com/miko550/CVE-2022-46169.git cd CVE-2022-46169 Usage usage: CVE-2022-46169.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg: http://127.0.0.1 -l LIST, --list LIST List o...

snapshot-demo

Snapshot Attack Demo This is the original demo of Unanticipated Snapshot Attack found by us. Thanks Intel for the Security Advisory. Build the demo Install Intel SGX SDK and Occlum First of all, anyone willing to run the demo must install Intel SGX SDK and Occlum you can choose to use our modifie...

CVE-2026-28331 SolarWinds Patch Manager Sensitive Information Exposure Vulnerability

SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges...

EUVD-2026-105173

SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges...

CVE-2026-28331

The SolarWinds Patch Manager software is susceptible to a Sensitive Information Exposure vulnerability (CWE-200). This flaw allows local users to access sensitive information, which could potentially be leveraged to gain elevated privileges . The vulnerability has a CVSS 3.1 base score of 4.4 (Me...

CVE-2026-28331 SolarWinds Patch Manager Sensitive Information Exposure Vulnerability

SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges...