304254 matches found
CVE-2024-1086
CVE-2024-1086 For learning purpose. Refer: https://pwning.tech/nftables/ https://github.com/Notselwyn/CVE-2024-1086 Kconfig: +CONFIGCONFIGFSFS=y +CONFIGSECURITYFS=y +CONFIGNFTABLES=y mnlcbrun: Operation not supported +CONFIGNETFILTERNETLINKGLUECT=y +CONFIGNETLINKDIAG=y +CONFIGNFTCT=y...
CVE-2026-110658
A flaw was found in Sofia-SIP. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a specially crafted Session Initiation Protocol SIP message containing an oversized multipart boundary that exceeds the message body length. During message parsing, this flaw causes the...
CVE-2026-110237
A flaw was found in vifm. This vulnerability allows a local attacker to achieve arbitrary code execution with the privileges of another user. The application reuses pre-existing inter-process communication IPC named pipes in a shared temporary directory without verifying file ownership. A local...
CVE-2026-102460
A flaw was found in Eclipse Vert.x Web. When chained authentication handlers are used to protect endpoints, the handler fails to validate required permission scopes if an incoming request was already authenticated by an earlier handler in the pipeline. An authenticated remote user with a valid...
CVE-2026-86536
A flaw was found in Apache Thrift's JavaScript bindings. An unauthenticated remote attacker can exploit a prototype pollution vulnerability—where shared JavaScript object definitions are modified—by sending specially crafted input to an application using the affected bindings. Successful...
CVE-2026-67414
A flaw was found in rabbitmq-server. This vulnerability allows an authenticated remote attacker to cause a Denial of Service DoS by exhausting broker memory. When processing Advanced Message Queuing Protocol AMQP messages, the parser fails to limit the aggregate number of array elements across an...
CVE-2026-70190
A flaw was found in .NET. An authorized local attacker can exploit improper file link resolution before file access to achieve privilege escalation. By convincing a user to interact with a crafted file or link, the attacker can manipulate file paths to gain elevated privileges on the system...
CVE-2026-70161
A flaw was found in .NET. An authorized local attacker can achieve privilege escalation due to a path traversal vulnerability caused by improper file path restrictions. By manipulating file paths to access locations outside the intended directory, the attacker can gain elevated privileges on the...
SupplyChainAttacks
Firmware Supply Chain Attacks This repository provides a curated and comprehensive collection of documented firmware supply chain attacks discovered or investigated by Binarly REsearch team. Maintained by Binarly, the project serves as an educational and reference resource for cybersecurity...
CVE-2024-0582-dataonly
CVE-2024-0582 A data-only attack based on CVE-2024-0582 Description The exploit follows the strategy in this blog post, except that I didn't use a child process to open files. I found some exploits on GitHub follows the strategy in this write-up. After I reproduced the exploit with socket-based...
CVE-2026-8054
1. Vulnerability Overview CVE-2026-8054 is a high-severity pre-authentication SQL injection vulnerability Pre-auth SQL Injection in the dotCMS Core Publish Audit API. The vulnerability is officially tracked as Security Incident SI-75 and was formally disclosed at the end of May 2026. Since...
CVE-2020-10129
CVE-2020-10129 - SearchBlox product before V-9.2 is vulnerable to Privileged Escalation-Lower user is able to access Admin Product Description: SearchBlox simplifies enterprise search for complex organizations. SearchBlox intuitive and intelligent tools offer out-of-the-box setup, secure...
CVE-2026-17073
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution...
CVE-2026-17068
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag...
CVE-2026-17275
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers...
retbleed-speculative-execution-poc
Retbleed: Arbitrary Speculative Code Execution via RSB Underflow A hands-on reproduction of Retbleed CVE-2022-29900 / CVE-2022-29901 — the 2022 micro-architectural attack that broke the "Retpoline" defense by proving that ret instructions, long assumed safe, can be hijacked when the CPU's Return...
CVE-2026-17068 IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag...
EUVD-2026-103141
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag...
CVE-2026-17068
IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to a bypass of Network File System (NFS) version restrictions. The root cause is the improper enforcement of the export version flag , which could allow a local attacker to bypass these restrictions (CWE-285). To remediate this, users should ap...