CVE-2025-43537

CVE-2025-43537 Apple Security Credit Researcher: Al Sadman Awal Officially credited by Apple Product Security for the responsible disclosure of CVE-2025-43537. Overview CVE-2025-43537 is a security vulnerability identified during independent security research and responsibly disclosed to Apple...

CVE-2023-24059

CVE-2023-24059 Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023. authentication| complexity| vector ---|---|--- not available| not available| not available confidentiality| integrity| availability...

CVE-2022-0847

CVE-2022-0847 PoC Usage dirty-pipe CVE-2022-0847 USAGE: dirty-pipe --target --offset --data OPTIONS: -t, --target TargetFile -o, --offset Offset -d, --data Data -h, --help Print help information...

CVE-2016-5195

Description: dcow is a possible exploit of the vulnerability CVE-2016-5195. Running the program as unprivileged user on a vulnerable system, it'll modify the /etc/passwd file, forcing the password "dirtyCowFun" SHA-512, but could be modified for older standards. In case of successful execution,...

Security update for python, python-base, python-doc

This update for python, python-base, python-doc fixes the following issue: CVE-2026-82049: tarfile extraction filters mishandle archives containing a hard link to a symbolic link, allowing file modification and content disclosure bsc1280459. Patch Instructions: To install this SUSE update use the...

CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Access via wfufiledownloader.php file, WordPress File Upload Solution poc, solution vulnerability occurs, arbitrary file access, manipulation, or modification is possible...

CVE-2021-1675_CarbonBlack_HuntingQuery

CarbonBlack Hunting Query for CVE-2021-1675 PrintNightmare 1 Based on Sigma rule on detecting the POC code filemodname:c:\windows\system32\spool\drivers\x64\3\old\1\123 2 Based on Sigma rule on detecting the POC code modloadname:c:\windows\system32\spool\drivers\x64\3 OR...

Directus - Unauthenticated File Modification

Directus versions from 10.8.0 before 11.9.3 allow unauthenticated attackers to modify the contents of an existing file when a valid file UUID is known. The PATCH /files/id endpoint processes multipart file uploads without proper authentication, allowing file content replacement despite returning ...

By-Poloss..-..CVE-2026-11912

CVE-2026-11912: Simple File List eeListSettings'AllowFrontManage' != 'YES' return;...

CVE-2022-30525_check

CVE-2022-30525check Description: This script checks for the presence of the OS command injection vulnerability CVE-2022-30525 in Zyxel USG FLEX devices running firmware versions 5.00 through 5.21 Patch 1. The vulnerability allows an attacker to modify specific files and execute OS commands on a...

SparstanBoogie

SparstanBoogie's origins were tested reportedly on iOS/iPadOS 15.2 - 16.7 RC 20H18 and 17.0 however, tests have been conducted up to 26.1 26.1. Also any testing on devices above or under whats been reported is welcomed as it may come back in newer devices so theres no reason to shrug off any good...

DirtyPipe

Dirty Pipe Exploit: CVE-2022-0847 The Dirty Pipe vulnerability, also known as CVE-2022-0847, is a significant flaw within the Linux kernel. This repository provides an adapted version of the widely used exploit code to make it more user-friendly and modular. A very good explanation of this...

Linux Distros Unpatched Vulnerability : CVE-2026-85518

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in OpenSCAP. When decomposing a Source DataStream SDS file, the application does not properly validate relative file path attributes, leading t...

Rocky Linux 9.6 [TuxCare] Security Update: hplip / hplip-common / hplip-libs / libsane-hpaio Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792704664)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792704664 advisory. - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software...

AlmaLinux 9.6 [TuxCare] Security Update: hplip / hplip-common / hplip-libs / libsane-hpaio Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792704664)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792704664 advisory. - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software...

CVE-2026-85518

A flaw was found in OpenSCAP. When decomposing a Source DataStream SDS file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted...

EUVD-2026-107542

A flaw was found in OpenSCAP. When decomposing a Source DataStream SDS file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted...

PT-2026-120799

A flaw was found in OpenSCAP. When decomposing a Source DataStream SDS file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted...

CVE-2026-113716

A flaw was found in virtualenv. When creating an isolated environment, directory validation resolves existing symbolic links symlinks rather than verifying the intended target destination. A local attacker could exploit this vulnerability by pre-creating a directory tree containing symlinks...

CVE-2026-113720 virtualenv: Seeded files retain permissions from an older cache

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the app-data copy seeder uses shutil.copy to copy cached package files into later environments, causing cached source modes to override the current run's umask. A cache populated under a permissive umask can...