CVE-2026-47836

The base directory spring.cloud.config.server.svn.basedir used by the Spring Cloud Config Server to clone SVN repositories to is susceptible to time-of-check-time-of-use TOCTOU attacks. Spring Cloud Config 5.0.0 - 5.0.4 Spring Cloud Config 4.3.0 - 4.3.4 Spring Cloud Config 4.0.0 - 4.2.8 Spring...

cve-2024-6387-poc

cve-2024-6387-poc una condizione di corsa nel gestore dei segnali nel server OpenSSH sshd 7etsuo Descrizione Un exploit per CVE-2024-6387, che colpisce una condizione di corsa nel gestore dei segnali del server OpenSSH sshd su sistemi Linux basati su glibc. La vulnerabilità consente l'esecuzione...

ksmbrace

ksmbrace Ricerca di vulnerabilità in ksmbd , il server SMB3 nel kernel Linux fs/smb/server/. Difetti lato attaccante autenticato sui percorsi durable-handle e di risoluzione dei path di ksmbd. Il nome richiama il tema della race condition di questa linea di lavoro vedi la UAF sul byte-range-lock...

RoguePlanet

RoguePlanet RoguePlanet Windows Defender Schwachstelle Willkommen zurück allerseits !!! Der Exploit ist eine Race Condition, also ist es Glückssache. Ich habe auf manchen Maschinen eine 100% Erfolgsrate erzielt, während er auf anderen nicht funktionierte. Der Exploit wurde unter Windows 11...

CVE-2026-47836

Spring Cloud Config Server is susceptible to a time-of-check-time-of-use (TOCTOU) attack via the spring.cloud.config.server.svn.basedir property, which specifies where SVN repositories are cloned. The affected version ranges are 5.0.0–5.0.4, 4.3.0–4.3.4, 4.0.0–4.2.8, and 3.1.14 and earlier . The ...

CVE-2026-78991

A flaw was found in WebProtect in Google Chrome. A race condition vulnerability allows a remote attacker, who has compromised the renderer process, to obtain sensitive information. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-79196

A flaw was found in Google Chrome's Editing feature. This race condition vulnerability allows a remote attacker, leveraging social engineering, to obtain sensitive information by crafting a malicious HTML page. Successful exploitation could lead to unauthorized disclosure of user data...

CVE-2026-80556

CVE-2026-80556 is a use-after-free vulnerability in the Linux kernel's mmc: atmel-mci driver, occurring in atmci_remove due to a race condition. When the module is removed, atmci_remove performs cleanup and devm_kzalloc-allocated host memory is freed, but pending or running work (atmci_work_func ...

CVE-2026-80548

This vulnerability affects the s390/vfio_ccw driver in the Linux kernel . The io_mutex lock, originally defined to serialize io_regions , had also been informally associated with I/O operations due to their close relationship. This left a small number of race condition windows unaddressed. The fi...

CVE-2026-80547

CVE-2026-80547 affects the Linux kernel 's s390/vfio_ccw driver. The vulnerability arises because the CRW (Channel Retry Word) region relies exclusively on asynchronous events from hardware, yet lacks a dedicated lock to manage the list of those payloads. Without the lock, payloads may not be rea...

CVE-2026-74754

CVE-2026-74754 is a race condition in the Linux kernel SCSI core. The shost->eh_noresume flag is consulted twice per error-handling (EH) iteration—once before scsi_autopm_get_host() and once before scsi_autopm_put_host(). If a power-management path (e.g., ufshcd_set_dev_pwr_mode()) flips this ...

CVE-2026-74740

CVE-2026-74740 is a TOCTOU (time-of-check-time-of-use) NULL pointer dereference in the Linux kernel's net/sched: act_api subsystem. When handling TC_ACT_GOTO_CHAIN, tcf_action_exec() performs an initial rcu_access_pointer(a->goto_chain) check, then calls tcf_action_goto_chain_exec() which perf...

CVE-2026-79057

A flaw was found in Google Chrome on Android. A race condition in the 'Start' component could allow a local attacker to potentially execute arbitrary code outside of the application's security sandbox. This exploitation requires leveraging social engineering and a co-installed application...

CVE-2026-78906

A flaw was found in Chromium's ANGLE component. A race condition, triggered by a specially crafted HTML page, could allow a remote attacker to execute arbitrary code outside of the browser's security sandbox. This could lead to a complete compromise of the affected system...

CVE-2026-78901

A flaw was found in the V8 JavaScript engine. A race condition vulnerability allows a remote attacker to execute arbitrary code within the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page...

CVE-2026-78934

A flaw was found in Google Chrome's ReadAloud component. A race condition vulnerability allows a remote attacker, by leveraging social engineering and a crafted HTML page, to execute arbitrary code within the browser's sandbox. This could lead to unauthorized access or control over the affected...

CVE-2026-79155

A flaw was found in Google Chrome. A race condition in the FileSystem component could allow a remote attacker, who has already compromised the browser's renderer process, to execute arbitrary code outside of the security sandbox. This exploitation is possible through a specially crafted HTML page...

CVE-2026-79094

A flaw was found in the Workers component of Google Chrome. This race condition vulnerability allows a remote attacker to bypass system access restrictions. By crafting a malicious HTML page, an attacker can exploit this flaw, leading to unauthorized access within the system...

CVE-2026-78894

A flaw was found in Google Chrome. A race condition in the Payments component allows a remote attacker, who has compromised the browser's renderer process, to leak sensitive cross-origin data. This exploitation occurs when a specially crafted HTML page is rendered, potentially leading to...

CVE-2024-6387-Updated-x64bit

CVE-2024-6387-Updated-x64bit exploit.in से CVE-2024-6387 के लिए निजी x64 RCE एक्सप्लॉइट Python 02.07.2024 यह रिपॉज़िटरी CVE-2024-6387 भेद्यता एक्सप्लॉइट का एक कार्यशील वैरिएंट प्रदान करती है, जिसमें रियल-टाइम एक्टिव शेल, मल्टीथ्रेडिंग, फ़ाइल से टारगेट दर्ज करना और रंगीन आउटपुट का समर्थन शामिल है।...