2509 matches found
advisories
Enable Security Advisories This repository contains reproduction code, proof-of-concept scripts, and supporting files for security advisories published by Enable Security. Full advisories: https://www.enablesecurity.com/advisories/ The complete advisory content descriptions, impact, timeline, etc...
CVE-2026-50369
CVE-2026-50369 reproducer for a TOCTOU race condition in rdpcorets.dll!CRdpPipeGfxPlugin::Enable on Windows Server 2025 RDS Session Hosts. i reported this as a DoS; the code-path seem to somehow also enable EoP. this reproducer is a PoC for the DoS path alone. Bug Enable reads a COM interface...
Vulnerability-Disclosure-Policy
Vulnerability Disclosure Policy We believe that vulnerability disclosure is a two-way street. Vendors, as well as researchers, must participate in co-ordinated vulnerability disclosure. When Enable Security discovers vulnerabilities through its own research, it will notify vendors of these...
cisco7crack
cisco7crack crypt and decrypt the cisco enable 7 passwords...
EUVD-2026-109274
yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-level data scope restrictions by sending a data-permission-enable header set to false. Attackers can add this header to /admin-api requests, which DataPermissionRpcWebFilter...
CVE-2026-116016
The yudao-cloud software (through version 2026.09 ) is vulnerable to an authorization bypass that allows authenticated users to evade row-level data scope restrictions. The root cause is that the DataPermissionRpcWebFilter component trusts the data-permission-enable header. By sending this header...
CVE-2026-116016 yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable Header
yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade row-level data scope restrictions by sending a data-permission-enable header set to false. Attackers can add this header to /admin-api requests, which DataPermissionRpcWebFilter...
netgear-telenetenable
telnetenable.py Paul Gebheim Translated from the C source available from http://wiki.openwrt.org/oldwiki/openwrtdocs/hardware/netgear/telnetconsole Running: python telnetenable.py IP - The IP of your Netgear device, usually 192.168.1.1 MAC - The mac address should be the MAC address of the LAN po...
CVE-2026-111738
The Speed Optimizer WordPress plugin versions before 7.8.5 is vulnerable to a privilege escalation flaw where it fails to verify network-level permissions. A site administrator who is not a Super Admin can bypass restrictions to create or overwrite network-wide options across a multisite network....
Linux Distros Unpatched Vulnerability : CVE-2026-98480
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: trf7970a: power down on startup RX gain failure trf7970astartup powers up the device before applying the optional RX gain reduction. If the register read o...
UBUNTU-CVE-2026-98480
In the Linux kernel, the following vulnerability has been resolved: nfc: trf7970a: power down on startup RX gain failure trf7970astartup powers up the device before applying the optional RX gain reduction. If the register read or write fails, it returns without undoing that power-up. Probe's unwi...
DEBIAN-CVE-2026-98480
In the Linux kernel, the following vulnerability has been resolved: nfc: trf7970a: power down on startup RX gain failure trf7970astartup powers up the device before applying the optional RX gain reduction. If the register read or write fails, it returns without undoing that power-up. Probe's unwi...
CVE-2026-98480
In the Linux kernel, the following vulnerability has been resolved: nfc: trf7970a: power down on startup RX gain failure trf7970astartup powers up the device before applying the optional RX gain reduction. If the register read or write fails, it returns without undoing that power-up. Probe's unwi...
EUVD-2026-103720
In the Linux kernel, the following vulnerability has been resolved: nfc: trf7970a: power down on startup RX gain failure trf7970astartup powers up the device before applying the optional RX gain reduction. If the register read or write fails, it returns without undoing that power-up. Probe's unwi...
CVE-2026-98480
A vulnerability exists in the Linux kernel 's nfc: trf7970a driver. The trf7970a_startup() function powers up the device before applying optional RX gain reduction . If a register read or write fails, the function returns without undoing the power-up, leaving the VIN enable unbalanced because the...
CVE-2026-98480 nfc: trf7970a: power down on startup RX gain failure
In the Linux kernel, the following vulnerability has been resolved: nfc: trf7970a: power down on startup RX gain failure trf7970astartup powers up the device before applying the optional RX gain reduction. If the register read or write fails, it returns without undoing that power-up. Probe's unwi...
CVE-2026-98480: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: nfc: trf7970a: power down on startup RX gain failure trf7970astartup powers up the device before applying the optional RX gain reduction. If the register read or write fails, it returns without undoing that power-up. Probe's unwi...
PT-2026-116761
In the Linux kernel, the following vulnerability has been resolved: cgroup/cpuset: Return PERR NOCPUS in remote partition enable on subpartitions cpus conflict When a remote partition is created underneath an existing local partition via a non-partition PRS MEMBER intermediate cgroup, update...
PT-2026-116699
In the Linux kernel, the following vulnerability has been resolved: nfc: trf7970a: power down on startup RX gain failure trf7970a startup powers up the device before applying the optional RX gain reduction. If the register read or write fails, it returns without undoing that power-up. Probe's...
PT-2026-116982
In the Linux kernel, the following vulnerability has been resolved: usb: core: clear both ep in and ep out for non-ep0 control endpoints In usb enable endpoint, non-zero control endpoints where usb endpoint xfer control&ep-desc is true populate both dev-ep inepnum and dev-ep outepnum with the sam...