Lucene search
+L

3249 matches found

NVD
NVD
added 2026/09/16 10:18 p.m.13 views

CVE-2026-92583

AVideo through 29.0 contains a race condition in the enforceRateLimit function that fails to atomically increment rate limit counters, allowing attackers to bypass all rate limits including login brute-force protection by issuing concurrent requests. Attackers can submit parallel credential...

6.9CVSS0.00236EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/16 5:25 p.m.11 views

CVE-2016-5195

This record is for learning purposes only; any illegal use is prohibited. Principle The vulnerability works by concurrently flushing dirty pages, causing the content of a file that was originally read-only to be modified. If the modified file is owned by root and has the SUID permission, it can b...

7.2CVSS7.3AI score0.83524EPSS
SaveExploits92
Kitploit
Kitploit
added 2026/09/16 11:42 a.m.14 views

CVE-2026-36958

CVE-2026-36958: Denial of Service via Concurrent HTTP Requests CVE ID: CVE-2026-36958 Date: 2026-04-29 Discoverer: Kirubel Solomne Vendor: U-SPEED Product: U-SPEED Router Firmware Version: V1.0.0 CWE: CWE-400 - Uncontrolled Resource Consumption Description The U-SPEED Router firmware V1.0.0 is...

7.5CVSS5.9AI score0.00323EPSS
SaveExploits2
NVD
NVD
added 2026/09/16 11:17 a.m.7 views

CVE-2026-90020

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring the lock. Therefore a concurrent bind can change the device state...

0.0021EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/16 11:17 a.m.9 views

DEBIAN-CVE-2026-89998

In the Linux kernel, the following vulnerability has been resolved: dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a race condition because dmsetupmdqueue walks &md-tabledevices without...

7.8CVSS0.00164EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/16 11:17 a.m.10 views

CVE-2026-89955

In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix NULL deref in statusshow during queue probe When vfioapmdevprobequeue creates the sysfs attribute group, the queue's driver data has not yet been set. A concurrent read of the 'status' attribute can therefore ca...

0.002EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/16 10:33 a.m.9 views

EUVD-2026-80628

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring the lock. Therefore a concurrent bind can change the device state...

5.6AI score0.0021EPSS
SaveExploits0References8
OSV
OSV
added 2026/09/16 10:33 a.m.6 views

CVE-2026-90020 USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring the lock. Therefore a concurrent bind can change the device state...

SaveExploits0References11
CVE
CVE
added 2026/09/16 10:33 a.m.23 views

CVE-2026-89998

This Linux kernel vulnerability affects the Device Mapper (dm) subsystem. A race condition occurs when userspace issues two concurrent table-load ioctls where one succeeds and the other fails: dm_setup_md_queue walks &md->table_devices without holding a lock, racing against dm_table_destroy → ...

7.8CVSS5.7AI score0.00164EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/16 8:48 a.m.27 views

CVE-2026-89788 ksmbd: fix tree connection use-after-free in smb2_tree_connect()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix tree connection use-after-free in smb2treeconnect ksmbdtreeconnconnect publishes a new tree connection in sess-treeconns with a single reference and returns its pointer to smb2treeconnect. The handler continues to...

9.8CVSS0.00516EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/16 8:48 a.m.31 views

CVE-2026-89788

CVE-2026-89788 is a use-after-free vulnerability in the Linux kernel's ksmbd (SMB server) subsystem, specifically in smb2_tree_connect() (fs/smb/server/smb2pdu.c). A race condition exists where ksmbd_tree_conn_connect() publishes a new tree connection with a single reference, but a concurrent ses...

9.8CVSS6.4AI score0.00516EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/16 8:24 a.m.25 views

CVE-2026-89774 Bluetooth: SCO: hold sk properly in sco_conn_ready

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: hold sk properly in scoconnready sk deref in scoconnready must be done either under conn-lock, or holding a refcount, to avoid concurrent close. conn-sk and parent sk is currently accessed without either, and...

8.8CVSS0.00318EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/16 8:10 a.m.8 views

cpra

Continuous Pulse and Recovery Agent Checks services, sends alerts, and runs the recovery actions you configure. CPRa is a self-hosted monitoring and recovery agent written in Go. It runs health checks against your services on a schedule, opens and closes incidents against configurable thresholds,...

5.8AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/16 7:05 a.m.17 views

CVE-2026-12352

CVE-2026-12352 Summary An unauthenticated, load-induced authentication bypass was identified in the Digi PortServer TS 4 H MEI, allowing retrieval of a local device configuration file without valid credentials. Under increased concurrent request load, the web server begins serving file contents...

5.9CVSS5.9AI score0.004EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 7:01 a.m.9 views

CVE-2025-14847

📝 MongoDB Scanner – Run Notes Script Name mongoexposurescanner.py 1. Prerequisites Python 3.9+ Network access to target hosts Approved scope for scanning Verify Python: root@kitploit: python3 --version 2. Files Used File| Purpose ---|--- mongoscanner.py| Scanner script targets.txt| Target hosts...

8.7CVSS7.9AI score0.83218EPSS
SaveExploits39
Kitploit
Kitploit
added 2026/09/16 12:28 a.m.11 views

erlvulnscan

Webbased concurrent scanner for CVE-2015-1635. Live implementation running here. This demonstration website is used for development of this project and it stability is not guaranteed. Information on this project is written here. As the "TODO" list documented there has been completed this code is...

10CVSS7.9AI score0.99999EPSS
SaveExploits18References1
OSV
OSV
added 2026/09/16 12:00 a.m.6 views

UBUNTU-CVE-2026-91947

GHSA-6mpx-c8rj-whj5: FreeRDP server DRDYNVC parser use-after-free during concurrent channel close...

7.7CVSS0.003EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/16 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-89998

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm: fix race when loading and unloading a table If the userspace calls two concurrent table load ioctls and one of them succeeds and the other fails, there is a...

7.8CVSS0.00164EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/16 12:00 a.m.10 views

CVE-2026-91947

GHSA-6mpx-c8rj-whj5: FreeRDP server DRDYNVC parser use-after-free during concurrent channel close...

7.7CVSS0.003EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/16 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-90020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - USB: gadget: fix NULL pointer dereference in gadgetdevioctl gadgetdevioctl reads dev-gadget before acquiring dev-lock, but dev-state is checked after acquiring...

0.0021EPSS
SaveExploits0References3
Rows per page
Query Builder