325474 matches found
EUVD-2026-73644
Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-47297
Microsoft SQL Server is affected by a deserialization of untrusted data vulnerability that allows an unauthorized attacker to achieve remote code execution over a network . The vulnerability requires no prior authentication or user interaction but carries a High attack complexity , resulting in a...
steganographer
Steganography in Python This script will hide files inside images and save the modified image to disk The maximum size of file which can be hidden inside an image depends on the dimension of the image. root@kitploit: maxfilesize = heightofimage widthofimage 6 / 8 bytes '100k words.txt' is hidden ...
EUVD-2026-73446
Exposure of sensitive system information to an unauthorized control sphere in Windows License Manager allows an authorized attacker to disclose information locally...
EUVD-2026-73413
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally...
CVE-2026-68842
CVE-2026-68842 is an information disclosure vulnerability in the Windows MIDI Service Module , where sensitive system information is exposed to an unauthorized control sphere. An authorized attacker with local access and low privileges can disclose confidential information, with high impact to co...
EUVD-2026-73406
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...
EUVD-2026-73367
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...
CVE-2026-56198
CVE-2026-56198 is an out-of-bounds read in Microsoft Trace Data Helper that allows an authorized attacker to elevate privileges locally . The vulnerability is rated CVSS 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact across confidentia...
Phirautee
Phirautee A proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell and does not require any third-party libraries. This tool steals the information, holds an organisation’s data to hostage for payments or...
EUVD-2026-73302
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...
CVE-2019-14529
CVE-2019-14529 Multiple SQL Injection vulnerability in OpenEMR project Vulnerable function in file: /openemr/interface/forms/eyemag/save.php Conditions : any authorized user Vulnerable versions: 5.0.2, Fixed in 5.0.2 version. Description There are two functions: 1. "storePDF", with non filtered...
EUVD-2026-73090
Exposure of sensitive system information to an unauthorized control sphere in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to disclose information over a network...
CVE-2026-71330
CVE-2026-71330 is an information disclosure vulnerability in Windows Services for NFS ONCRPC XDR Driver . An unauthorized network-based attacker with no privileges can expose sensitive system information over the network, resulting in a High confidentiality impact (CVSS 3.1: 7.5 ). CISA's SSVC as...
CVE-2026-69832
CVE-2026-69832 is an information disclosure vulnerability in Windows Win32K , a kernel-mode component handling graphics and input processing. Exposure of sensitive system information to an unauthorized control sphere allows a low-privilege local attacker to read sensitive data. The CVSS 3.1 score...
CVE-2026-69694
CVE-2026-69694 affects the Windows IP Address Management (IPAM) Service . The root cause is deserialization of untrusted data , which allows an authorized attacker to escalate privileges locally. The CVSS 3.1 score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating tha...
CVE-2026-69507
CVE-2026-69507 affects the Microsoft Windows Search Component . The vulnerability stems from insertion of sensitive information into an externally-accessible file or directory, allowing an authorized attacker to disclose information over a network. The CNA-assigned CVSS 3.1 score is 5.7 (MEDIUM) ...
lazywarden
Secure, Automated, and Multi-Cloud Bitwarden Backup and Import System Lazywarden is a Python automation tool designed to Backup and Restore data from your vault, including Bitwarden attachments. It allows you to upload backups to multiple cloud storage services and receive notifications across...
CVE-2026-69406
CVE-2026-69406 is a Windows Kernel information disclosure vulnerability. It stems from the exposure of sensitive system information to an unauthorized control sphere, allowing an authorized attacker to disclose information locally. The assigned CVSS 3.1 score is 5.5 (Medium) with a local attack v...