305783 matches found
PT-2026-112302
Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description An out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when the softwar...
PT-2026-112305
Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description An out-of-bounds read in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, ther...
PT-2026-112322
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue exists where sensitive system information is exposed to an unauthorized control sphere, allowing an authorized attacker to disclose information locally. Recommendations At the...
PT-2026-112427
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally, which can lead to an elevation-of-privilege that affects the system. Recommendations At...
PT-2026-112396
Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description External control of system or configuration settings allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...
PT-2026-112102
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A use-after-free condition in Windows NTFS enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...
PT-2026-112063
Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges through a physical attack. A heap-based buffer overflow is a memo...
PT-2026-112255
Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description Improper authorization in the Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. Recommendations At the moment, there...
PT-2026-112411
Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description An untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...
PT-2026-112349
Name of the Vulnerable Software and Affected Versions Microsoft Trace Data Helper affected versions not specified Description An issue in Microsoft Trace Data Helper allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere. Recommendations A...
PT-2026-112206
Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Improper access control in the Windows Projected File System allows an authorized attacker to locally disclose sensitive information, which can affect the system...
PT-2026-112303
Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description A use-after-free condition in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issu...
CentOS Linux 8.4 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (CENTOS8.4:CLSA-2026:1791918528)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791918528 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...
SUSE SLES15 Security Update : unbound (SUSE-SU-2026:4624-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4624-1 advisory. - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. - CVE-2026-77955: Possible ZONEMD verification bypass...
CVE-2026-108941
The Linketic CityGaussian software (versions up to 2.0 ) contains a code injection vulnerability within the Sidecar Parsing component. Specifically, the parse_cfg_args function in the internal/utils/common.py file is susceptible to exploitation because the manipulation of the cfg_args argument al...
CVE-2026-108941 Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection
A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...
CVE-2025-7558-PoC
CVE-2025-7558-PoC Summary A vulnerability labeled as critical has been found in code-projects Voting System 1.0. The affected element is an unknown function of the file /admin/positionsadd.php. Such manipulation of the argument Description leads to sql injection. This vulnerability is documented ...
CVE-2026-108940 EricLBuehler Mistral.rs handlers.rs calibration_apply path traversal
A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument savecimatrix results in path traversal. The attack may be initiated remotely. The...
CVE-2026-108940 EricLBuehler Mistral.rs handlers.rs calibration_apply path traversal
A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibrationapply of the file mistralrs-server-core/src/handlers.rs. Performing a manipulation of the argument savecimatrix results in path traversal. The attack may be initiated remotely. The...