ROS-20260716-73-0056

The vulnerability of Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

Azure Synapse Privilege Escalation

The vulnerability of Azure Synapse cloud analytics service is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

Amazon Linux 2023 : opensc (ALAS2023-2026-1898)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1898 advisory. A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation caus...

OIBSIP_CyberSecurty_Task-9

SQL Injection — DVWA & SQLMap Task 5 of the Oasis InfoByte...

exploit-toolkit

Target Exploitation Toolkit — GitHub Actions Structure...

dotnet: .NET Security Feature Bypass Vulnerability

A flaw was found in .NET. An unauthorized attacker can exploit this vulnerability over a network due to improper verification of cryptographic signatures. This allows the attacker to bypass a critical security feature, potentially leading to significant compromise of confidentiality, integrity, a...

ASP.NET Core: ASP.NET Core: Privilege Elevation via Authentication Bypass

A flaw was found in ASP.NET Core. An authorized attacker can exploit this authentication bypass vulnerability over a network by manipulating assumed-immutable data. This can allow the attacker to elevate their privileges within the system...

Web-Binary-Exploitation-Security-Assessment

Web & Binary Exploitation — Security Assessment Coursework fr...

EUVD-2026-44522

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require use...

EUVD-2026-44515

A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file src/tools/get-component-link.ts of the component mcpgetComponentLink. Executing a manipulation of the argument url can lead to server-side request forgery. The attack ma...

Microsoft Office buffer overflow vulnerability (CNVD-2026-31554)

Microsoft Office is a suite of office software that primarily provides features for document editing, spreadsheet processing, presentation creation, and enterprise collaboration. There is a buffer overflow vulnerability in Microsoft Office. This vulnerability stems from an improper validation of...

VMware Monitoring XSS

The vulnerability of the monitoring tools for VMware Aria, VMware Cloud Foundation, and VMware vSphere Foundation, as well as VMware Telco Cloud Platform, a telecommunications cloud platform, is related to the lack of security measures for website structures. Exploiting this vulnerability allows ...

Tenda BE12 Pro stack buffer overflow vulnerability (CNVD-2026-32963)

The Tenda BE12 Pro is a Wi-Fi7 router released by Tenda in January 2026. The Tenda BE12 Pro has a stack buffer overflow vulnerability. This vulnerability stems from the fromSafeMacFilter function, which fails to correctly validate the input length when processing the page parameter. Attackers can...

camel-docling Apache Camel Data Compromise

The vulnerability of the camel-docling component in the Apache Camel framework is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to influence the confidentiality and integrity of the protected information from a remote location...

nfs-utils Privilege Escalation

The vulnerability of the nfs-utils package is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

SonicWall SMA SRF

The vulnerability of the Appliance Work Place microprogramming software for SonicWall’s SMA 1000 series network interface controllers is related to insufficient checking of requests on the server side. Exploiting this vulnerability can allow a remote attacker to execute an SSRF attack...

CVE-2026-15750 mastergo-design mastergo-magic-mcp mcp__getComponentLink get-component-link.ts z.string server-side request forgery

A weakness has been identified in mastergo-design mastergo-magic-mcp up to 0.2.0. Impacted is the function z.string of the file src/tools/get-component-link.ts of the component mcpgetComponentLink. Executing a manipulation of the argument url can lead to server-side request forgery. The attack ma...

CVE-2026-15749 mastergo-design mastergo-magic-mcp mcp__C2d get-c2d.ts execute path traversal

A security flaw has been discovered in mastergo-design mastergo-magic-mcp up to 0.2.0. This issue affects the function execute of the file src/tools/get-c2d.ts of the component mcpC2d. Performing a manipulation of the argument filePath results in path traversal. The attack requires a local...

CVE-2026-15777

Google Chrome on Linux versions prior to 150.0.7871.125 is vulnerable to a Use after free flaw within its UI components . A remote attacker can exploit this by tricking a user into performing specific UI gestures on a crafted HTML page , potentially leading to heap corruption and arbitrary code e...

CVE-2026-15773

A use after free vulnerability exists in the Core component of Google Chrome on Windows (versions prior to 150.0.7871.125 ). A remote attacker can exploit this by using a crafted HTML page to potentially perform a sandbox escape . The vulnerability also affects Microsoft Edge (Chromium-based) and...