4109 matches found
CVE-2026-83580: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83698: Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70149: Heap-based Buffer Overflow
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...
wa-tunnel
wa-tunnel - Tunnel TCP attraverso WhatsApp Questo è un codice basato su Baileys che permette di fare tunneling di dati TCP attraverso due account WhatsApp. Può essere utile in diverse situazioni, ad esempio con operatori di rete che offrono dati WhatsApp illimitati o in aerei dove si ha accesso...
GHSA-5974-GFQC-WRCM Contao: Improper access control in the table access voter
Due to a caching defect in the security voter that governs table-level access to Contao's Data Container DCA backend, a low-privileged, non-admin backend user can obtain unauthorized read, create, update, and delete access to database tables outside their assigned module permissions. This include...
PT-2026-109308
Name of the Vulnerable Software and Affected Versions Contao versions 5.7.0 through 5.7.11 Description A caching defect in the security voter governing table-level access to the Data Container DCA backend allows a low-privileged, non-admin backend user to obtain unauthorized read, create, update,...
EUVD-2026-44637
PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments...
dompdf-rce
Exploit RCE per dompdf Questo repository contiene un'applicazione demo vulnerabile che utilizza dompdf 1.2.0 e un exploit che consente l'esecuzione remota di codice tramite un file poliglotta ttf+php. Per maggiori dettagli, visita https://positive.security/blog/dompdf-rce Istruzioni 1. Esegui...
Use of Cache Containing Sensitive Information
Overview next is a react framework. Affected versions of this package are vulnerable to Use of Cache Containing Sensitive Information via insufficient scoping of response cache keys in the server's route caching logic in base-server.ts. Because cache keys are not bound to their source route, a...
CVE-2026-107205
Versions of LMCache through 0.5.5 are vulnerable to a missing authentication flaw in the multiprocess coordinator. The vulnerability allows remote unauthenticated attackers to access the HTTP fleet control API, which listens on all interfaces by default. Exploitation of these endpoints enables at...
EUVD-2026-94125
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem...
CVE-2026-97680
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem...
CVE-2026-97680
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem...
CVE-2026-97680: Improper Access Control
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem...
Linux Distros Unpatched Vulnerability : CVE-2026-94114
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Symbolic name not mapping to correct object vulnerability in Apache Commons. BCEL caches attacker- controlled classes under their self-declared names without...
CVE-2026-97680
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem...
CVE-2026-97680 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem...
CVE-2026-97680
IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a vulnerability (CVE-2026-97680 ) caused by improper access control in the vertex result caching subsystem . This flaw could allow a remote authenticated attacker to obtain sensitive information or inject malicious data . To remediate...
CVE-2026-97680 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information or inject malicious data due to improper access control in the vertex result caching subsystem...