CVE-2026-95732

An authentication bypass vulnerability exists in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system...

CVE-2026-95733

A vulnerability exists in a component of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated adjacent attacker to execute arbitrary code on the affected system...

CVE-2026-95723

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-88066

Claude Desktop is Anthropic's desktop application for interacting with Claude. Prior to 1.8089.0, Claude Desktop on Windows invokes git.exe through uvspawn without an absolute path, allowing Windows search-path resolution to select a malicious git.exe placed in the opened project's current workin...

CVE-2026-63478

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's tree parser in src/models/GitTree.js accepts a standalone .. tree-entry name because it rejects only path separators. During clone or checkout from a malicious or...

CVE-2026-63395

isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphic-git's git.checkout writes new child paths through symlinked leading directory components without checking them. A malicious repository can first place a directory symlink and later...

CVE-2026-54161

Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS, PDU and SCD hardware. From 2.8.3 to 2.8.5, upsmon in clients/upsmon.c inserts the server-supplied ups.alarm value into shell commands executed by notify, asyncnotify, and wall. Whe...

CVE-2026-61495 TinyUSB 0.21.0 Out-of-Bounds Write via mtp_container_get_string()

TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class helper mtpcontainergetstring in src/class/mtp/mtp.h that allows a malicious USB host to corrupt adjacent memory by supplying a crafted MTP string with an unbounded character coun...

CVE-2026-61495 TinyUSB 0.21.0 Out-of-Bounds Write via mtp_container_get_string()

TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class helper mtpcontainergetstring in src/class/mtp/mtp.h that allows a malicious USB host to corrupt adjacent memory by supplying a crafted MTP string with an unbounded character coun...

CVE-2026-61495 TinyUSB 0.21.0 Out-of-Bounds Write via mtp_container_get_string()

TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class helper mtpcontainergetstring in src/class/mtp/mtp.h that allows a malicious USB host to corrupt adjacent memory by supplying a crafted MTP string with an unbounded character coun...

CVE-2026-61495

TinyUSB versions through 0.21.0 are vulnerable to an out-of-bounds write in the MTP device class helper function mtp_container_get_string() located in src/class/mtp/mtp.h. The root cause is an unchecked memcpy operation that copies up to 510 bytes into a fixed-size destination buffer when process...

EUVD-2026-116211

TinyUSB through 0.21.0, fixed in commit e85c2b8, contains an out-of-bounds write vulnerability in the MTP device class helper mtpcontainergetstring in src/class/mtp/mtp.h that allows a malicious USB host to corrupt adjacent memory by supplying a crafted MTP string with an unbounded character coun...

CVE-2026-88066

Claude Desktop on Windows versions prior to 1.8089.0 is vulnerable to arbitrary code execution due to an uncontrolled search path issue. The application invokes git.exe using uv_spawn without specifying an absolute path, which allows Windows to resolve a malicious git.exe binary located in the cu...

CVE-2026-121071

creationtimestamp| type| source ---|---|--- 2026-11-03 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20261104 2026-11-03 21:15:49+00:00| seen| https://infosec.exchange/users/cve/statuses/117554580606442564 2026-11-03 23:10:04+00:00| seen|...

isf

Industrial Exploitation Framework ISFIndustrial Exploitation Framework is a exploitation framework based on Python, it's similar to metasploit framework. ISF is based on open source project routersploit. Read this in other languages:English, 简体中文, Disclaimer Usage of ISF for attacking targets...

EUVD-2026-116200

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-95723 Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-95723

A missing integrity verification vulnerability exists in the Virtual Intranet Access (VIA) client . This flaw could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system. No specific exploit links or patch versions are provided...

CVE-2021-28480_HoneyPoC3

ExchangeRCE-CVE-2021-28480 THIS IS NOT A REAL EXPLOIT IT IS A HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ PoC for exploiting RCE in Exchange CVEs: CVE-2021-28480, CVE-2021-28481, CVE-2021-28482 and CVE-2021-28483. Usage Achieves RCE on Exchange Servers To run, from a Linux host: chmod +...

EUVD-2026-116167

A missing integrity verification vulnerability exists in HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to execute arbitrary code on the affected system...