7373 matches found
Kernel-Exploit-Dojo-248
Kernel-Exploit-Dojo-248 CTF kernel exploitation notes, PoCs,...
Kernel-Exploit-Dojo-866
Kernel-Exploit-Dojo-866 CTF kernel exploitation notes, PoCs,...
Kernel-Exploit-Dojo-283
Kernel-Exploit-Dojo-283 CTF kernel exploitation notes, PoCs,...
Kernel-Exploit-Dojo-962
Kernel-Exploit-Dojo-962 CTF kernel exploitation notes, PoCs,...
Kernel-Exploit-Dojo-822
Kernel-Exploit-Dojo-822 CTF kernel exploitation notes, PoCs,...
CVE-2026-23863
An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously formatted documents with embedded NUL bytes in the filename to be shown in the application as one type of file but run as an executable when opened. We have not seen evidence of...
Linux Distros Unpatched Vulnerability : CVE-2026-10952
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted...
Linux Distros Unpatched Vulnerability : CVE-2026-47319
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory allocation with excessive size value vulnerability in Samsung Open Source rlottie allows Excessive Allocation. This issue affects rlottie: before...
CVE-2026-10808
The CVE-2026-10808 entry concerns itsourcecode Fees Management System 1.0. A SQL injection vulnerability exists in the /manage_student.php script, triggered by manipulating the ID parameter. This affects an unknown function within that file. The issue allows remote exploitation, and a public expl...
PYSEC-2026-211
A security flaw has been discovered in gradio-app gradio 6.14.0. This affects the function saveaudiotocache of the component Audio Cache Key Handler. Performing a manipulation results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high...
Photon OS 5.0: Expat PHSA-2026-5.0-0862
An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0862. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
PT-2026-46381
Unauthenticated Local File Inclusion in Truemag = 4.3.14.2 versions...
Microsoft Threatening Security Researcher
An anonymous security researcher called "Nightmare Eclipse" has been publishing a series of significant security exploits against Microsoft Windows--including one that breaks BitLocker. Microsoft has threatened legal action against the researcher. Lots of recriminations are being traded back and...
May Linux Patch Wednesday
May Linux Patch Wednesday. A total of 1,638 vulnerabilities 474 in the Linux kernel. For comparison, in April there were 1,035 vulnerabilities a record!. And this time it turns out to be a record again, more than one and a half times higher! The acceleration is both impressive and alarming. But w...
Google Chrome 输入验证错误漏洞
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 had a vulnerability related to input validation. This vulnerability stemmed from insufficient input validation by Codecs, which could allow remote attackers to exploit cross-source data throug...
Linux Distros Unpatched Vulnerability : CVE-2026-41438
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - Unknown description CVE-2026-41438 Note that Nessus relies on the presence of the package as reported by the vendor...
Y2X
Y2eXploit Y2X --- Overview Y2eXploit Y2X is an a...
GHSA-MXFR-6HCW-J9RQ Langroid has Prompt to SQL Injection, Leading to RCE
Security Vulnerability Report: Prompt to SQL Injection leading to RCE in latest Langroid Affected Scope langroid @localhost:5432/postgres" Create SQL Chat Agent config = SQLChatAgentConfig databaseuri=DATABASEURI, llm=OpenAIGPTConfig apibase=os.getenv"bas...