CVE-2026-25253

CVE-2026-25253 OpenClaw 1-Click RCE ★ CVE-2026-25253 OpenClaw 1-Click Remote Code Execution PoC ★ https://github.com/user-attachments/assets/e6957c61-7549-4e68-831e-a05436504a3e Description CVE-2026-25253 : OpenClaw Authentication Token Exfiltration Vulnerability description: OpenClaw aka clawdbo...

Malware in @flexmr/utils

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

JitBit_Helpdesk_Auth_Bypass

This repository does not have a README...

CVE-2026-24055-OAuth-Langfuse

CVE-2026-24055 — Unauthenticated Slack OAuth Install in Langfuse Course Project for Web and Application Security — Group 06, class NT213.Q21.ANTT 📌 Summary The project reproduces a real-world security vulnerability that has been publicly disclosed CVE-2026-24055 on the Langfuse platform — an OAut...

CVE-2021-42562

CVE-2021-42562: Improper Access Control in MITRE Caldera Caldera versions =2.8.1 does not properly segregate user privileges, resulting in non-admin users having access to read and modify configuration or other components which should only be accessible by admin users. Vendor Disclosure: The...

Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914

Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914 Azure Networking Privilege Escalation Exploit CVE‑2025‑54914 September 4, 2025 By Mark Mallia 1. Executive Summary On September 4, 2025 Microsoft’s Azure Networking services received a critical security advisory that documents a...

EUVD-2026-111081

An integer overflow in the remote-control screen processing component of TeamViewer clients Full Client, Portable and Remote Control App prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the...

CVE-2026-111585 Integer Overflow in TeamViewer Remote Control Screen Decompression Leading to Heap-Based Buffer Overflow

An integer overflow in the remote-control screen processing component of TeamViewer clients Full Client, Portable and Remote Control App prior to version 15.83 may allow a malicious remote host to cause a denial of service or, depending on the platform, potentially execute arbitrary code with the...

CVE-2026-111585

TeamViewer clients (Full Client, Portable, and Remote Control App) prior to version 15.83 are vulnerable to an integer overflow within the remote-control screen processing component. This flaw can lead to a heap-based buffer overflow , potentially allowing a malicious remote host to cause a denia...

pepeScraper

pepeScraper - 4chan scraper A complete scraper for 4chan Now that's fast. pepeScraper is a scraper that uses context for your searches and returns exactly what you want. I'm learning how to make an item look cooler than it actually is Enter keywords, anything you can think of just be careful what...

CVE-2025-55182

🛡️ CVE-2025-55182 - Understand and Mitigate a Vulnerability 🚀 Getting Started Welcome to the CVE-2025-55182 project. This guide will help you understand the vulnerability and provide steps to download and run the software you need. 📥 Download the Application 🔍 What is CVE-2025-55182? CVE-2025-5518...

EUVD-2026-111079

Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version 15.82 for Windows during installation of Advanced Asset Management allows a local authenticated user with low privileges to execute arbitrary commands as SYSTEM. An attacker can pla...

CVE-2026-111583

The TeamViewer Full Client and Host for Windows prior to version 15.82 is vulnerable to Local Privilege Escalation (CWE-269) due to improper access control in the installer staging directory. During the installation of Advanced Asset Management , a local authenticated user with low privileges can...

Malware in paychex-pdftron

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in sc-announcer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in sc-hydrate-carousel-price

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

EUVD-2026-111077

Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior to version 15.82 allows a local authenticated attacker with low privileges to supply a signed executable through a forged IPC response and cause it to load a malicious DLL from a...

EUVD-2026-111075

An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to version 15.83 and the Remote Management Monitoring component prior to version 26.10.1 allows a local authenticated attacker with low privileges to execute scripts as SYSTEM/root...

EUVD-2026-111073

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited ...

CVE-2026-92372 Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution

An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to version 15.83 allows a remote attacker to execute arbitrary code by supplying crafted screen-image data during a remote-control session. The vulnerability can also be exploited ...