825364 matches found
afterimage
Afterimage: protocol boundary studies Previously published as CVE Replay. The repository name and presentation changed; the pinned releases, original reporter attribution, fixture paths, and recorded results retain their original identity. Independent offline studies compare published fixes using...
CVE-2022-21661-Demo
This repository demonstrates a vulnerability in WordPress 5.8.2, in which missing sanitization in class-wp-tax-query.php can, in very specific situations, allow attackers to perform SQL injection. Note that successful exploitation requires developers to add vulnerable code to the WordPress...
AirScout
Right now only a dutch version of the app is available. English will follow soon. User Guide – Wi-Fi Passive Monitor ESSID + Band Filter Legal & Ethics Notice Educational Use For educational and authorized testing only. You are solely responsible for how you use this tool. Intentionally disruptin...
msquic-compat-vn-key-poison
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · msquic-compat-vn-key-poison msquic-compat-vn-key-poison MsQuic v2.6.1 a01333cf - Microsoft Compatible version negotiation is supposed to wait until the client can actually process a packet of the new version. This tre...
o3_finds_cve-2025-37899
based on How I used o3 to find CVE-2025-37899, a remote zeroday vulnerability in the Linux kernel’s SMB implementation target vuln ollama vuln CVE-2024-37032 https://github.com/ollama/ollama/releases/tag/v0.1.34 https://github.com/ollama/ollama/compare/v0.1.33...v0.1.34 commit: 2a21363 by using l...
ROS-20261014-73-0081
The vulnerability of the batadvblaaddclaim function in the net/batman-adv/bridgeloopavoidance.c module, which is part of the network functions of the Linux operating system’s kernel, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker...
The vulnerability of the Windows Deployment Services service allows a perpetrator to execute arbitrary code.
The vulnerability of Windows Deployment Services for Windows operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge browsers allows attackers to compromise the integrity of the protected information.
The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...
The vulnerability of the Animation component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.
The vulnerability of the Animation component in Google Chrome and Microsoft Edge relates to errors in type conversion of protected information. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
The vulnerability of the Password component in Google Chrome and Microsoft Edge web browsers allows attackers to gain access to protected information.
The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to authentication errors. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
PT-2026-113595
Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in Samsung Open Source QA-Board allows : OS Command Injection...
Google BoringSSL Name Constraints Bypass in SAN Validation Logic
Overview Five Name Constraints findings in BoringSSL VU410595.8–.12 describe cases where certificate names may not be constrained as intended. Records .8, .9, .10 and .12 concern the legacy crypto/x509 path; .11 concerns the newer pki path. Two have been fixed, one is accepted, one is disputed, a...
ROS-20261014-73-0077
The vulnerability of the sctpsendmsg function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to compromise the...
The vulnerability of the if_nullptr_null_str() function in QGIS GIS software allows a hacker to disclose protected information.
The vulnerability of the ifnullptrnullstr function in QGIS GIS software is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
ROS-20261014-73-0068
The vulnerability of the virtiotransportrecvlisten function in the net/vmwvsock/virtiotransportcommon.c file, which is part of the networking functions in the Linux kernel, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause ...
The Unseen Credential Surface: How AI Agents Expose Secrets
The Unseen Credential Surface: How AI Agents Expose Secrets By Haowei Ren · October 14, 2026 There is a quiet assumption behind every AI agent: that when it "just runs a command for you," it handles your credentials as carefully as a good engineer would. It does not. This is not due to malicious...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to induce a service failure.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors in type conversion of protected information. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
ROS-20261014-73-0008
The vulnerability of the mptcppmaddtimer function in the net/mptcp/pm.c module of the MPTCP protocol implementation in Linux operating systems is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge web browsers allows attackers to gain access to protected information.
The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
The vulnerability of the Password component in Google Chrome and Microsoft Edge web browsers allows attackers to gain access to protected information.
The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to authentication errors. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...