CVE-2026-96248

Stack-based buffer overflow in Windows Host Guardian Service allows an unauthorized attacker to deny service over a network...

CVE-2026-88072

Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...

CVE-2026-87709

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally...

CVE-2026-85927

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-85918

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-85373

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-85375

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-88072

A vulnerability in Windows Host Guardian Service involves improper access control that allows an authorized attacker to achieve local privilege escalation . The root cause is associated with CWE-59 (Improper Link Resolution Before File Access). The impact includes high levels of confidentiality, ...

CVE-2026-87709

A vulnerability exists in the Windows Host Guardian Service due to improper access control . This flaw allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-250 (Execution with Unnecessary Privileges) . While the technical root cause is not detailed...

CVE-2026-96248

A stack-based buffer overflow exists in the Windows Host Guardian Service , which could allow an unauthorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-121 and has been assigned a High base severity score of 7.5. Remediation is...

CVE-2026-85927

A heap-based buffer overflow exists in the Windows Universal Plug and Play (UPnP) Device Host . This vulnerability allows an authorized attacker to achieve local privilege escalation . While the documents confirm the existence of the flaw and its impact on local security, specific details regardi...

CVE-2026-85918

A Use after free vulnerability exists in the Windows Universal Plug and Play (UPnP) Device Host . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a high severity base score of 7.0. No specific exploit information or remediation de...

CVE-2026-85375

A Use after free vulnerability exists in the Windows Universal Plug and Play (UPnP) Device Host component. This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or technical root cause analysis beyond the vulnerability type are provided in the...

CVE-2026-85373

A heap-based buffer overflow exists in the Windows Universal Plug and Play (UPnP) Device Host . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific version numbers, root causes, or remediation steps are provided in the documents beyond the general ...

CVE-2026-44848-PoC

CVE-2026-44848 — Portainer: Missing Authorization on Docker Plugin Endpoints → Host RCE Proof-of-concept for CVE-2026-44848 , a missing-authentication CWE-862 vulnerability in Portainer that lets a non-admin user with Docker endpoint access perform privileged Docker plugin operations → full host...

CVE-2021-23017

CVE-2021-23017 PoC Scanner NGINX DNS Overflow Vulnerability Check - CVE-2021-23017 PoC This Python script checks if an nginx server is potentially vulnerable to the critical CVE-2021-23017 vulnerability, which affects the integrated DNS resolver in nginx and can cause a buffer overflow. 🔍 What do...

CVE-2026-106034

A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system...

CVE-2026-102734

asteval is a Python expression evaluator designed for restricted execution. Prior to 1.0.9, in asteval/astutils.py, the default Interpreter with numpy enabled exposes a ctypes type and permits fromaddress memory access. safegetattr blocks the ctypes module but not reachable ctypes type objects,...

CVE-2026-106034

A Path Traversal vulnerability exists in Ivanti Xtraction before version 2026.4 . This flaw allows a remote authenticated attacker to create or modify arbitrary directories on the host file system. The vulnerability is categorized under CWE-22: Improper Limitation of a Pathname to a Restricted Di...

CVE-2026-72744-poc

CVE-2026-72744: Nuxt Chrome DevTools endpoint information disclosure PoC Japanese version Overview This repository reproduces CVE-2026-72744 , an information disclosure in Nuxt's development-only Chrome DevTools workspace endpoint. The vulnerable server uses attacker-controlled HTTP headers,...