CVE-2026-73466

CVE-2026-73466 affects Arista EOS , where plaintext user passwords may be written to log files (/var/log/agents/Aaa-*) under CWE-532 (Insertion of Sensitive Information into Log File). The precondition is that PyServer trace level 4 on agent Aaa is explicitly enabled via a non-standard debugging ...

CVE-2026-73465

CVE-2026-73465 is a CWE-532 (Insertion of Sensitive Information into Log File) vulnerability in Arista EOS . When MgmtSecuritySslCertKey trace levels 0, 3, and/or 4 are enabled on the ConfigAgent agent, plaintext RSA and EC private keys may be written to /var/log/agents/ConfigAgent-* log files. E...

CVE-2026-73465 On affected platforms running Arista EOS, under certain circumstances plaintext private keys

On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already...

CVE-2026-56992

CVE-2026-56992 is a permission bypass in the AP ROM component of Google Pixel devices, caused by a confused deputy flaw in multiple files. It enables local escalation of privilege with System execution privileges required and no user interaction needed. Google classifies the severity as Critical ...

CVE-2026-56992

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78988

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56986

CVE-2026-56986 is an out-of-bounds read due to type confusion in multiple files within Android (Pixel) , as referenced in the Google Pixel security bulletin for September 2026. The flaw enables local escalation of privilege with no additional execution privileges and no user interaction required,...

EUVD-2026-78985

In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56986

In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78984

In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56985

In multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-0847-dirty-pipe-checker

CVE-2022-0847-dirty-pipe-checker Script Bash para comprobar CVE-2022-0847 Dirty Pipe Resumen Esta es la historia de CVE-2022-0847, una vulnerabilidad en el kernel de Linux desde la versión 5.8 que permite sobrescribir datos en archivos de solo lectura arbitrarios. Esto conduce a una escalada de...

cve-2024-23897-jenkins-poc

CVE-2024-23897: Jenkins 임의 파일 읽기 args4j @-Syntax CVE-2024-23897 의 완전한 로컬 재현으로, Jenkins CLI의 치명적인 CVSS 3.1 기본 점수 9.8 임의 파일 읽기 취약점입니다. 이 프로젝트는 Jenkins 마이너 버전만 다른 두 개의 Docker 스택을 실행하고, 동일한 개념 증명을 두 스택에 대해 수행하여, 패치되지 않은 컨트롤러에서 취약점이 발생하고 패치된 컨트롤러에서는 조용해지는 것을 보여줍니다. 모든 것은 단일 Python 프로그램인 poc.py에 의해...

CVE-2022-20818

CVE-2022-20818: 部分的なファイル読み取りによる Cisco SD-WAN のローカル権限昇格 Viptela SSH シェルの「config - load」機能は、「wget」を使用してリモートの「command」ファイルを FTP 経由で取得します。悪意のある FTP サーバーをホストし、wget によって作成されたローカルファイルをシンボリックリンクに置き換えることで、攻撃者はコマンドが実行される「root」権限を悪用して、任意のファイルの最初の行を読み取ることができます。...

DEBIAN-CVE-2026-91958

FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xfdetectmonitors. Attackers can craft a malicious RDP file with an out-of-range selectedmonitors value to trigger out-of-bounds heap read and write...

CVE-2026-55211

Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, leading to a buffer overflow when untrusted files are parsed. The severity assumes surfio is used to parse untrusted files in a networking context such as a we...

CVE-2024-23745

CVE-2024-23745 Notion Web Clipper 1.0.37에서 .nib 파일은 Dirty NIB 공격에 취약합니다. NIB 파일은 조작되어 임의의 명령을 실행할 수 있습니다. 또한 애플리케이션 내에서 NIB 파일이 수정된 경우에도 Gatekeeper가 애플리케이션 실행을 계속 허용할 수 있으므로, 애플리케이션의 컨텍스트 내에서 임의의 명령을 실행할 수 있습니다. Impact 공격자는 이 취약점을 악용하여 Notion 애플리케이션 내에서 권한 없는 명령을 실행할 수 있으며, 이로 인해 민감한 사용자 데이터가 손상되...

CVE-2026-55211

Surfio, a library by Equinor for reading and writing surface files, is vulnerable to a buffer overflow caused by insufficient validation of size fields in IRAP files prior to version 0.0.19. When untrusted IRAP files are parsed, the missing size checks allow out-of-bounds reads leading to memory ...

EUVD-2026-78634

FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xfdetectmonitors. Attackers can craft a malicious RDP file with an out-of-range selectedmonitors value to trigger out-of-bounds heap read and write...

CVE-2026-91958 FreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor Index

FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xfdetectmonitors. Attackers can craft a malicious RDP file with an out-of-range selectedmonitors value to trigger out-of-bounds heap read and write...