CVE-2026-70190

A flaw was found in .NET. An authorized local attacker can exploit improper file link resolution before file access to achieve privilege escalation. By convincing a user to interact with a crafted file or link, the attacker can manipulate file paths to gain elevated privileges on the system...

CVE-2026-70161

A flaw was found in .NET. An authorized local attacker can achieve privilege escalation due to a path traversal vulnerability caused by improper file path restrictions. By manipulating file paths to access locations outside the intended directory, the attacker can gain elevated privileges on the...

SupplyChainAttacks

Firmware Supply Chain Attacks This repository provides a curated and comprehensive collection of documented firmware supply chain attacks discovered or investigated by Binarly REsearch team. Maintained by Binarly, the project serves as an educational and reference resource for cybersecurity...

CVE-2024-0582-dataonly

CVE-2024-0582 A data-only attack based on CVE-2024-0582 Description The exploit follows the strategy in this blog post, except that I didn't use a child process to open files. I found some exploits on GitHub follows the strategy in this write-up. After I reproduced the exploit with socket-based...

CVE-2026-8054

1. Vulnerability Overview CVE-2026-8054 is a high-severity pre-authentication SQL injection vulnerability Pre-auth SQL Injection in the dotCMS Core Publish Audit API. The vulnerability is officially tracked as Security Incident SI-75 and was formally disclosed at the end of May 2026. Since...

CVE-2020-10129

CVE-2020-10129 - SearchBlox product before V-9.2 is vulnerable to Privileged Escalation-Lower user is able to access Admin Product Description: SearchBlox simplifies enterprise search for complex organizations. SearchBlox intuitive and intelligent tools offer out-of-the-box setup, secure...

CVE-2026-17068

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag...

CVE-2026-17073

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution...

CVE-2026-17275

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers...

retbleed-speculative-execution-poc

Retbleed: Arbitrary Speculative Code Execution via RSB Underflow A hands-on reproduction of Retbleed CVE-2022-29900 / CVE-2022-29901 — the 2022 micro-architectural attack that broke the "Retpoline" defense by proving that ret instructions, long assumed safe, can be hijacked when the CPU's Return...

CVE-2026-17068 IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag...

EUVD-2026-103141

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper enforcement of the export version flag...

CVE-2026-17068

IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to a bypass of Network File System (NFS) version restrictions. The root cause is the improper enforcement of the export version flag , which could allow a local attacker to bypass these restrictions (CWE-285). To remediate this, users should ap...

EUVD-2026-103140

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks during file handle resolution...

CVE-2026-17073

IBM i versions 7.3, 7.4, 7.5, and 7.6 are affected by an Improper Access Control vulnerability (CWE-284) within the Network File System (NFS) . A local attacker can obtain sensitive information because the system fails to perform subtree checks during file handle resolution. Remediation involves ...

CVE-2026-17275 IBM i is Affected by an Improper Validation Vulnerability

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed transactions due to improper validation of attacker-supplied transaction identifiers...

CVE-2026-17275

IBM i versions 7.3, 7.4, 7.5, and 7.6 (5770-SS1) are vulnerable to an improper validation issue (CWE-285). A remote attacker could perform unauthorized manipulation of distributed transactions by exploiting the improper validation of attacker-supplied transaction identifiers. Impact is categorize...

CVE-2025-7771

CVE-2025-7771 — ThrottleStop.sys Arbitrary Physical Memory R/W Full proof-of-concept for the TechPowerUp ThrottleStop.sys driver CVE-2025-7771. A signed, still-loadable kernel driver exposes unvalidated physical memory read and write through two IOCTLs. This repo turns that primitive into a worki...

CVE-2026-85231

A flaw was found in libtirpc. An authenticated remote attacker could exploit this vulnerability by sending oversized wrapped data requests to an RPC Remote Procedure Call service configured with RPCSECGSS Remote Procedure Call Security-Generic Security Service integrity or privacy. This can lead ...

CVE-2026-89098

A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket by relying on program assertions to verify command arguments. A local user can exploit this vulnerability by sending a malformed request lacking the required arguments to trigger an...