50665 matches found
CVE-2026-101041 Vulnerability-Lookup - Race Condition in Account Recovery Token Consumption Allows Password Takeover
The account recovery password reset functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use TOCTOU race condition in the consumption of single-use recovery tokens. The original implementation verified the token nonce against the stored digest and then...
CVE-2026-101041
The vulnerability-lookup web application contains a TOCTOU race condition in its account recovery functionality (/user/confirm_account/). Specifically, the logic in the User model (website/models/user.py) and view layer (website/web/views/user.py) verifies and consumes single-use recovery tokens ...
Exploit for Race Condition in Apple Ipados
CVE-2026-43805: IODMACommand 상태 경쟁 분석 및 PoC Apple IOKit의 IOD...
CVE-2026-77063
A flaw was found in multer, a software component used in Node.js applications to handle file uploads. When an application configures an asynchronous file filter along with a file size limit, a race condition can occur. This vulnerability allows a remote attacker to bypass the intended file size...
binary-exploitation-coursework
Binary Exploitation Coursework Exploit development scripts fr...
PT-2026-99716
Name of the Vulnerable Software and Affected Versions Nezha versions 2.2.11 through 2.3.0 Description The service sentinel worker in service/singleton/servicesentinel.go contains an incomplete fix for a nil dereference issue. An authenticated user with the member role who owns an agent can trigge...
CVE-2026-101088: Time-of-check Time-of-use (TOCTOU) Race Condition
Nezha is a server and website monitoring tool. In versions = 2.2.11 and 2.3.1, the service sentinel worker service/singleton/servicesentinel.go contains an incomplete fix for a previously reported nil dereference denial of service GHSA-qjpp-gffx-2wm9. The 2026-07-21 fix re-validated the service...
CVE-2026-101041: Concurrent Execution using Shared Resource with Improper Synchronization
The account recovery password reset functionality in the vulnerability-lookup web application contains a time-of-check-to-time-of-use TOCTOU race condition in the consumption of single-use recovery tokens. The original implementation verified the token nonce against the stored digest and then...
PT-2026-99549
Name of the Vulnerable Software and Affected Versions vulnerability-lookup affected versions not specified Description The account recovery functionality contains a time-of-check-to-time-of-use TOCTOU race condition—a scenario where a system checks a condition and then uses the result, but the...
CVE-2026-100713
Froxlor 2.3.10 and earlier contain a time-of-check time-of-use TOCTOU race condition in the SSH key synchronization cron lib/Froxlor/Cron/System/SshKeys.php, SshKeys::generateFiles. The containment/symlink validation performed by FileDir::makeCorrectDir/makeCorrectFile is done only at check time;...
rainbet-casino-exploit
CVE-2026-31337 — Seed Rotation TOCTOU Race Condition PoC !...
EUVD-2026-87686
Froxlor 2.3.10 and earlier contain a time-of-check time-of-use TOCTOU race condition in the SSH key synchronization cron lib/Froxlor/Cron/System/SshKeys.php, SshKeys::generateFiles. The containment/symlink validation performed by FileDir::makeCorrectDir/makeCorrectFile is done only at check time;...
CVE-2026-100713
Froxlor versions 2.3.10 and earlier are vulnerable to a time-of-check time-of-use (TOCTOU) race condition in the SSH key synchronization cron (lib/Froxlor/Cron/System/SshKeys.php ). The flaw exists because symlink validation occurs only at check time, while the filesystem path is re-resolved as r...
CVE-2026-100713 Froxlor before 2.3.12 Privilege Escalation via SSH Key Sync
Froxlor 2.3.10 and earlier contain a time-of-check time-of-use TOCTOU race condition in the SSH key synchronization cron lib/Froxlor/Cron/System/SshKeys.php, SshKeys::generateFiles. The containment/symlink validation performed by FileDir::makeCorrectDir/makeCorrectFile is done only at check time;...
stake-vulnerability
CVE-2025-31337 — Seed Rotation TOCTOU Race Condition PoC !...
Astra Linux – Vulnerability in Chromium
In versions of Extensions in Google Chrome prior to 152.0.7977.65, race conditions allowed a remote attacker to bypass system access restrictions through a specially crafted Chrome extension. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
The race condition in Workers in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
In the version of Payments in Google Chrome prior to 153.0.8010.36, race conditions allowed a remote attacker to leverage social engineering to spoof UI elements through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
The race condition in Payments in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
In the version of Editing in Google Chrome prior to 152.0.7977.65, race conditions allowed a remote attacker to exploit social engineering techniques to obtain sensitive information through a crafted HTML page. Chromium security severity: Low...