CVE-2026-61754

CVE-2026-61754 affects NVIDIA Megatron Bridge (versions 0.0 through 0.5.0 , all platforms). The root cause is deserialization of untrusted data (CWE-502), allowing a local attacker with low privileges to achieve code execution, data tampering, and information disclosure . The CVSS v3.1 score is 7...

EUVD-2026-69308

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61758

CVE-2026-61758 affects NVIDIA Megatron Bridge (versions 0.0 to 0.5.0 , all platforms). The root cause is deserialization of untrusted data (CWE-502), allowing a local attacker with low privileges to achieve code execution, data tampering, and information disclosure . The vulnerability is scored C...

EUVD-2026-69307

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61758

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

EUVD-2026-69306

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61755

CVE-2026-61755 affects NVIDIA Megatron Bridge versions 0.0 through 0.5.0 across all platforms. The root cause is a deserialization of untrusted data flaw (CWE-502), part of a batch of 30 related CVEs disclosed in NVIDIA's September 2026 security bulletin. A successful local exploit requires low p...

CVE-2026-61755

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61756

NVIDIA Megatron Bridge (versions 0.0 to 0.5.0) is affected by a deserialization of untrusted data vulnerability (CWE-502). A local attacker with low privileges and no user interaction can exploit this to achieve code execution, data tampering, and information disclosure . The CVSS 3.1 score is 7....

CVE-2026-61756

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

EUVD-2026-69305

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61757

NVIDIA Megatron Bridge versions 0.0 through 0.5.0 contain a deserialization of untrusted data vulnerability (CWE-502) rated HIGH (CVSS 7.8) . A local attacker with low privileges and no user interaction could exploit this to achieve code execution, data tampering, and information disclosure . The...

EUVD-2026-69304

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

CVE-2026-61757

NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure...

Triage-CVE-2021-44228-Log4Shell-Log4j-

Triage: CVE-2021-44228 Log4Shell / Log4j このラボの目標は、近年最も広く悪用された実世界の脆弱性の1つであるLog4Shellという、別の有名な脆弱性をトリアージすることでした。影響を受けるライブラリがエンタープライズソフトウェア全体で非常に一般的だったためです。 ステップ1: NVDでCVEを開く 私はNational Vulnerability Databaseにアクセスし、CVEを調べました： root@kitploit: https://nvd.nist.gov/vuln/search/nvd/home?resultType=records...

CVE-2026-58567

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-58567

Dell PowerStore is affected by an OS Command Injection vulnerability that allows an authenticated user with limited privileges to execute arbitrary commands with root privileges . The CVSS 3.1 score is 8.8 (HIGH) , with a local attack vector, low complexity, low privileges required, changed scope...

EUVD-2026-69302

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges...

CVE-2026-83608

A flaw was found in xmldom, a JavaScript module for parsing and serializing XML. A remote attacker can exploit this vulnerability by providing a specially crafted DocumentType.name containing characters like or whitespace. This bypasses the requireWellFormed validation, allowing the injection of...

CVE-2026-82393

A flaw was found in pnpm. This vulnerability allows a remote attacker to perform a path traversal by crafting a malicious tarball dependency's manifest name. During package installation, pnpm fails to properly validate the manifest name, leading to files being extracted outside the intended...