217669 matches found
OESA-2026-3143 python-filelock security update
Security Fixes: filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use TOCTOU race condition allows local attackers to corrupt or truncate arbitrary user files through symlink attacks. The vulnerability exists in both Unix and Windows loc...
kernel: dm log: fix out-of-bounds write due to region_count overflow
A flaw was found in the Linux kernel's device-mapper log dm log component. A local attacker could exploit an integer overflow vulnerability where a 64-bit value is truncated to 32 bits, leading to undersized memory allocations. This allows for out-of-bounds writes to kernel memory during log...
CVE-2026-16519
A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...
PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)
...
CVE-2026-16519
A DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility desktop application. The application loads one or more dynamic-link libraries DLLs from an unsafe search path, allowing a local attacker to place a malicious DLL in a location searched before the legitimate library locatio...
CVE-2026-16519
Vulnerability overview. CVE-2026-16519 affects the GeoVision GV-IP Device Utility desktop application, where it loads DLLs from an unsafe search path. This DLL search order hijacking allows a local attacker to place a malicious DLL in a location that’s searched before the legitimate library, enab...
EUVD-2026-48511
The WP Hotel Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'widgetsearch' Shortcode Attribute in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
CVE-2026-16804
A flaw was found in Google Chrome. A remote attacker, who has already compromised the browser's renderer process, could exploit a use-after-free vulnerability. This can be achieved by enticing a user to visit a specially crafted HTML page. Successful exploitation could allow the attacker to perfo...
.NET: .NET Elevation of Privilege Vulnerability
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...
Pentest-Home-Lab
Pentest Home Lab A personal cybersecurity home lab for practi...
EUVD-2026-48452
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...
EUVD-2026-48454
Improper authorization in Azure Red Hat OpenShift ARO allows an authorized attacker to elevate privileges over a network...
EUVD-2026-48453
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...
EUVD-2026-48451
Server-side request forgery ssrf in Azure AI Search allows an authorized attacker to elevate privileges over a network...
CVE-2026-15100 Post Grid Gutenberg Blocks <= 5.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'searchnoresult' Block Attribute
The Post Grid Gutenberg Blocks – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'searchnoresult' Block Attribute in all versions up to, and including, 5.0.32 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers...
CVE-2026-58275
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-56165
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...
CVE-2026-54120
Improper input validation in Microsoft Surface allows an authorized attacker to execute code over a network...