CVE-2026-82344

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

CVE-2026-84271

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-82335

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...

CVE-2026-107707

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

EUVD-2026-95260

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

CVE-2026-107782 System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to...

Security Bulletin: Langflow OSS Authenticated Remote Code Execution (RCE) vulnerability exists in the validate_code function

Summary Langflow OSS contains a code injection vulnerability in its code validation endpoint. The endpoint executed submitted function definitions during validation, allowing decorator and default-argument expressions to run. An attacker with access to the endpoint could execute arbitrary command...

CVE-2026-107707

Intego Antivirus for Windows through version 3.0.0.1 is vulnerable to Local Privilege Escalation due to a link following vulnerability in its optimization module. An unprivileged local user can delete arbitrary folders as SYSTEM by replacing a scanned duplicate file's directory with a junction to...

CVE-2026-107707 Intego Antivirus through 3.0.0.1 Local Privilege Escalation via Optimization Module Junction

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

EUVD-2026-95210

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

obsidian-note-toolbar-PoC

Exécution de code arbitraire pilotée par le frontmatter dans Note Toolbar via la chaîne de variables propNAME → js: Statut CVE : demandé, en attente d'attribution. Cette découverte est publiée sous GHSA-q8cw-3m8c-5pf2. À l'attribution du CVE, ce dépôt sera renommé...

CVE-2026-20253

Environnement de laboratoire CVE-2026-20253 RCE pré-authentification dans Splunk Enterprise via le service sidecar PostgreSQL | ---|--- CVE| CVE-2026-20253 CVSS| 9.8 Critique Type| Exécution de code à distance non authentifiée CWE| CWE-306 : Absence d'authentification pour une fonction critique...

CVE-2026-0303

Exécution de code arbitraire dans Checkov CVE-2026-0303 CVE : CVE-2026-0303 | Score de base CVSS : 6.3 | Sévérité : Faible CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H CVE-2026-0303 - Vulnérabilité d'exécution de code arbitraire dans Checkov. Publiée par Palo Alto Networks le 9...

CVE-2026-28496

CVE-2026-27604 + CVE-2026-28496 — Chaîne RCE pré-auth FOSSBilling Résumé exécutif Ce dépôt contient un laboratoire Docker local permettant de reproduire et de valider la chaîne RCE pré-auth FOSSBilling, composée de deux vulnérabilités enchaînées : CVE| Type| CVSS v4| GHSA| Description...

CVE-2018-20062

CVE-2018-20062 ThinkPHP 5.0.23 - Vérification de l'impact de CVE-2018-20062 Versions affectées ThinkPHP 5.0.x 5.0.23 désérialisation invokefunction Méthodologie de vérification L'évaluation standard de l'impact pour cette CVE suit une approche en deux phases : 1. Vérification d'existence —...

CVE-2024-20154

CVE-2024-20154 : Débordement de pile SIB1-NB NB-IoT dans la bande de base MediaTek MT6769 Classification : CWE-121 — Débordement de tampon basé sur la pile Sévérité : Critique bulletin MediaTek · 8.8 Élevée, Vecteur d'attaque : Adjacent CISA-ADP Type : Exécution de code à distance — aucune...

CVE-2024-44625-Gogs-RCE-0.13.0

CVE-2024-44625 & Gogs-RCE-0.13.0 Validé contre un Gogs de l'ère 0.13.0 derrière un proxy inverse. Primitive : le suivi de lien symbolique de l'éditeur web vers un fichier .git/hooks/pre-receive ABSENT crée ce fichier exécutable. Chaque push ultérieur vers le dépôt l'exécute. Utilisation : Reverse...

CVE-2025-27636-RCE-in-Apache-Camel

CVE-2025-27636 – RCE Apache Camel Exploit Python simple pour la RCE par injection d'en-tête Apache Camel CVE-2025-27636. Utilisation Exécution de commande en une seule fois ┌──root㉿user-/run/…/user/2024/HTBox/CVE-2025-27636 └─ python3 CVE-2025-27636.py -t http://192.168.159.120 -c "id" Executing:...

CVE-2025-3248

Technical Analysis & Defensive Guide: CVE-2025-3248 Langflow Code Injection An educational reference and defensive analysis of CVE-2025-3248, a critical code injection vulnerability affecting Langflow. 📌 Vulnerability Profile CVE ID: CVE-2025-3248 Vulnerability Type: Remote Code Execution RCE /...