CVE-2026-55211

Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untrusted files are parsed. The severity assumes surfio is used to parse untrusted files in a networking context such as a we...

CVE-2024-23745

CVE-2024-23745 En Notion Web Clipper 1.0.37, un archivo .nib es susceptible al ataque Dirty NIB. Los archivos NIB pueden ser manipulados para ejecutar comandos arbitrarios. Además, incluso si un archivo NIB es modificado dentro de una aplicación, Gatekeeper puede permitir la ejecución de la...

CVE-2026-55211

Surfio, a library by Equinor for reading and writing surface files, is vulnerable to a buffer overflow caused by insufficient validation of size fields in IRAP files prior to version 0.0.19. When untrusted IRAP files are parsed, the missing size checks allow out-of-bounds reads leading to memory ...

EUVD-2026-78634

FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xfdetectmonitors. Attackers can craft a malicious RDP file with an out-of-range selectedmonitors value to trigger out-of-bounds heap read and write...

CVE-2026-91958 FreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor Index

FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xfdetectmonitors. Attackers can craft a malicious RDP file with an out-of-range selectedmonitors value to trigger out-of-bounds heap read and write...

CVE-2025-8088

CVE-2025-8088 PoC Solo uso educativo Los detalles sobre este CVE se pueden encontrar en: https://nvd.nist.gov/vuln/detail/CVE-2025-8088 ⚠️ Advertencia: Este repositorio contiene una prueba de concepto PoC para CVE-2025-8088. Está destinado únicamente a fines educativos, de investigación y de...

CVE-2024-36991

CVE 2024-36991 一个路径遍历漏洞，允许攻击者从系统读取文件。 技术摘要 CVE : 2024-36991 路径遍历 受影响系统 : Splunk Enterprise 9.2.1 , 9.1.4 , 9.0.9 法律免责声明 本工具仅用于授权安全评估。未经授权使用违反： 美国计算机欺诈与滥用法案 英国/欧盟计算机滥用法案 使用即表示接受获得适当授权的责任。所有测试需获得系统所有者的书面同意。 用法: root@kitploit: python3 exploit.py...

QNAP Photo Station - Path Traversal

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files. id: CVE-2019-7195 info: name: QNAP Photo Station - Path Traversal author: s4e-io severity: critical description: | QNAP devices running Pho...

kali-preseed-examples

Ejemplos de Preseed para Kali Los archivos de Debian preseed son herramientas útiles para automatizar la instalación y configuración de una distribución basada en Debian. Kali puede utilizarlos para acelerar las instalaciones con una instalación personalizada, consistente y sin intervención manua...

CVE-2026-86886

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

CVE-2026-84609

A permissions issue was addressed with improved path validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to modify protected system files...

CVE-2026-84559

A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to access restricted files...

CVE-2026-65411

A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, visionOS 27. An app may be able to modify protected parts of the file system...

EUVD-2026-78134

A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A malicious application may be able to access restricted files...

EUVD-2026-78110

This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to modify protected parts of the file system...

CVE-2026-84519

CVE-2026-84519 is an out-of-bounds write in Apple's AppleDouble framework, addressed with improved bounds checking. The vulnerability is triggered by mounting a disk image containing maliciously crafted files , which may lead to unexpected system termination (denial of service). Apple fixed it in...

CVE-2026-86886

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

EUVD-2026-78015

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, watchOS 27. An app may be able to modify protected system files...

CVE-2026-86886

CVE-2026-86886 is a path traversal vulnerability in Apple's iOS, iPadOS, and watchOS, addressed through improved input validation . An app may be able to modify protected system files , representing a HIGH integrity impact with no confidentiality or availability impact. The CVSS 3.1 base score is...

CVE-2026-84609

A permissions issue was addressed with improved path validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to modify protected system files...