57303 matches found
CVE-2026-70136
A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability's CVSS 3.1 score is 7.0 (High) , with an attack complexity rated as high and requiring low privileges for exploitatio...
CVE-2026-70141
An out-of-bounds read vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside the intended memory boundaries. No specific exploit details or in-the-wild exploitation reports are prov...
CVE-2026-70115
A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or patch versions are provided in the documents.
CVE-2026-70123
A numeric truncation error exists in the Microsoft Graphics Component , which can be exploited by an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-197 (Numeric Truncation Error) and CWE-122 (Heap-based Buffer Overflow). The impact includes hi...
CVE-2026-105731
The Microsoft Graphics Component contains a vulnerability where the use of uninitialized resources allows an authorized attacker to perform a local information disclosure . The impact is classified as having high confidentiality impact with a CVSS 3.1 base score of 5.5 . No specific exploit detai...
CVE-2026-110239 Rapyd Admin before 9.20.0 Stored XSS via rich-text Component
Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...
CVE-2026-110239
The Rapyd Admin software versions prior to 9.20.0 is vulnerable to a stored cross-site scripting (XSS) flaw within the x-rpd::rich-text Blade component. The root cause is the component's failure to sanitize bound model values, which are instead output as raw HTML. An authenticated user can exploi...
CVE-2026-110239 Rapyd Admin before 9.20.0 Stored XSS via rich-text Component
Rapyd Admin before 9.20.0 contains a stored cross-site scripting vulnerability in the x-rpd::rich-text Blade component that outputs bound model values as raw HTML without sanitisation. Authenticated users can set the bound property through the Livewire client API to store JavaScript that executes...
CVE-2026-110249
The Thunderbird email client is vulnerable to a Denial of Service (DoS) attack via its Exchange email component . A malicious, compromised, or MITM-controlled Exchange server can return a crafted SOAP response containing an element with an excessive number of attributes. This causes Thunderbird's...
CVE-2020-14883
CVE-2020-14883 Oracle WebLogic Server Authenticated Remote Code Execution RCE Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily...
CVE-2016-4014
CVE-2016-4014 SAP Netweaver JAVA AS UDDI Component XXE POST /uddi/api/replication HTTP/1.1 Host: host Connection: close Accept-Encoding: gzip, deflate Accept: / User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:78.0 Gecko/20100101 Firefox/78.0 Content-Type: text/xml;charset=UTF-8...
langflow-CVE-2026-17633-PoC
CVE-2026-17633 & CVE-2026-17632 — IBM Langflow OSS RCE For educational purposes only. Only use against systems you own or have explicit written authorization to test. 1. Introduction What is Langflow Langflow is an open-source low-code platform for building LLM-powered applications and AI agent...
Elasticsearch-CVE-2023-31419
Elasticsearch CVE 2023-31419 PoC...
samsung-bixby-command-execution-cve-2026-21055-improper-component-export
CVE-2026-21055 PoC — Samsung Bixby Improper Component Export Proof of Concept for CVE-2026-21055 : Improper export of Android application components in Samsung Bixby prior to version 4.0.70.8 allows local attackers to execute arbitrary commands with Bixby privilege. Overview This repository...
Microsoft Windows Search Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Windows Search Service Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...