4937 matches found
CVE-2026-23667
Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally...
CVE-2026-32116
Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another. From 0.21.0 to before 0.23.0, receiving a file wormhole receive from a malicious party could result in overwriting critical local files, including /.ssh/authorizedkeys and .bashrc. This cou...
CVE-2026-24285
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
CVE-2026-24283
Heap-based buffer overflow in Windows File Server allows an authorized attacker to elevate privileges locally...
CVE-2026-24294
Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...
CVE-2026-24289
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-24287
External control of file name or path in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-26106
Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2026-26134
Integer overflow or wraparound in Microsoft Office allows an authorized attacker to elevate privileges locally...
CVE-2026-26141
Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...
CVE-2026-26114
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
PT-2026-28353
Name of the Vulnerable Software and Affected Versions thingino-firmware versions prior to firmware-2026-03-16 Description The software contains an unauthenticated operating system command injection flaw within the WiFi captive portal CGI script. This allows remote attackers to execute arbitrary...
PT-2026-28464
Name of the Vulnerable Software and Affected Versions EVerest versions prior to 2026.02.0 Description EVerest is an EV charging software stack. Before version 2026.02.0, during the processing of RemoteStop, a delayed authorization response resets the authorized variable to true. This bypasses the...
Mass-Mirai-IoT-Exploit
Fiber — Mass Mirai IoT Exploit Languages: Englishengl...
BUGSCANNER---PHP-Web-Security-Scanner-for-Bug-Bounty-Penetration-Testing
!Pythonhttps://img.shields.io/badge/Python-3.10%2B-3776AB?st...
EUVD-2026-14557
OpenClaw versions prior to 2026.3.7 contain a sandbox escape vulnerability in the /acp spawn command that allows authorized sandboxed sessions to initialize host-side ACP runtime. Attackers can bypass sandbox restrictions by invoking the /acp spawn slash-command to cross from sandboxed chat conte...
Exploit for OS Command Injection in Arcane
CVE-2026-23520 MCP API Remote Command Execution RCE Proo...
DoJ Disrupts 3 Million-Device IoT Botnets Behind Record 31.4 Tbps Global DDoS Attacks
The U.S. Department of Justice DoJ on Thursday announced the disruption of command-and-control C2 infrastructure used by several Internet of Things IoT botnets like AISURU, Kimwolf, JackSkid, and Mossad as part of a court-authorized law enforcement operation. The effort also saw authorities from...
