EUVD-2026-77168

A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stblGetSampleInfos of the file isomedia/stblread.c of the component MP4Box. The manipulation results in reachable assertion. The attack must be initiated from a local position. The exploit h...

CVE-2026-90613

GPAC (component MP4Box ) contains a reachable assertion vulnerability in the function stbl_GetSampleInfos within the file isomedia/stbl_read.c , affecting versions up to commit f1219cde. The attack requires a local position with low privileges and results in a low availability impact (denial of s...

CVE-2026-90613 GPAC MP4Box stbl_read.c stbl_GetSampleInfos assertion

A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stblGetSampleInfos of the file isomedia/stblread.c of the component MP4Box. The manipulation results in reachable assertion. The attack must be initiated from a local position. The exploit h...

kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()

A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...

kernel: smb: client: fix query directory replay double-free

A flaw was found in the Linux kernel's Server Message Block SMB client. This vulnerability, a double-free error, occurs when the client attempts to free the same memory buffer twice during a directory query operation. An attacker could potentially exploit this flaw to cause memory corruption,...

Apache-Tomcat-CVE-2025-24813-Lab

CVE-2025-24813: Apache Tomcat Detection & Mitigation Lab A defensive cybersecurity portfolio project demonstrating vulnerability research, detection engineering, log correlation, layered mitigation, and technical documentation in an isolated two-VM environment. Project summary This repository...

MongoBleed

MongoBleed CVE-2025-14847 – Scanner et boîte à outils d'exploitation Une boîte à outils de recherche en sécurité pour MongoBleed – une fuite mémoire critique non authentifiée dans la décompression zlib de MongoDB, permettant aux attaquants d'extraire des données sensibles de la mémoire heap du...

CVE-2026-90608

A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw of the file /boafrm/formPortFw of the component boa. This manipulation of the argument servicetype causes buffer overflow. It is possible to initiate the attack remotely. The exploit has...

CVE-2026-90609

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

CVE-2026-90607

A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The manipulation of the argument submit-url results in buffer overflow. The attack may be performed from remote. The exploit is no...

UBUNTU-CVE-2026-90609

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

CVE-2026-90609

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

EUVD-2026-77167

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...

CVE-2026-90612 GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...

CVE-2026-90612 GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...

CVE-2026-90612 GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...

CVE-2026-90612

A reachable assertion vulnerability exists in GPAC (up to commit f1219cde), specifically in the function gf_sm_dump_command_list within the file scene_manager/scene_dump.c of the MP4Box component. The flaw can be triggered locally with low privileges and low complexity, resulting in a denial of s...

glinet-beryl-ax-triple-rce-cve-2026-11450-11451-11452-unauthenticated-root-on-travel-router

GL.iNet Beryl AX Triple RCE PoC PoC для трёх уязвимостей неаутентифицированного внедрения команд CVE-2026-11450, CVE-2026-11451, CVE-2026-11452 в прошивке дорожного маршрутизатора GL.iNet GL-MT3000 Beryl AX версии = 4.4.5. Полное описание:...

CVE-2024-28397-Exploit-Automation

CVE-2024-28397 Automatisation de l'exploit Un script d'automatisation Python pour exploiter la vulnérabilité js2py Sandbox Escape CVE-2024-28397. Cet outil automatise la génération et la livraison de la charge utile payload pour exécuter du code à distance RCE sur des instances vulnérables. ⚠️...

dogtag-pki: pki-core: redhat-pki: pki: ACME HTTP-01 validation SSRF via IP literal identifiers and unvalidated redirects

A flaw was found in Dogtag PKI's ACME responder where the HTTP-01 challenge validator accepts IP address literals as dns identifiers and follows HTTP redirects without validating that the target is a public address. An unauthenticated ACME account holder can exploit this to perform server-side...