773 matches found
CVE-2026-127277
A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the file etc/init.d/servicesmbd.sh of the component SMB Service. Performing a manipulation of the argument ANONACCESS results in improper initialization. The attack can be initiated...
SealSecurityAssignment
SealSecurityAssignment Researching on the vulnrability CVE-2023-26136 Research on Vulnerability: CVE-2023-26136 Description: Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=fal...
CVE-2026-127277
A security flaw exists in the Linksys EA8100 (version 1.0.3.216940) within the SMB Service component. Specifically, an unknown function in the file etc/init.d/service_smbd.sh allows for improper initialization when the ANON_ACCESS argument is manipulated. This vulnerability can be exploited remot...
CVE-2026-127277 Linksys EA8100 SMB Service service_smbd.sh initialization
A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the file etc/init.d/servicesmbd.sh of the component SMB Service. Performing a manipulation of the argument ANONACCESS results in improper initialization. The attack can be initiated...
EUVD-2026-124793
A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the file etc/init.d/servicesmbd.sh of the component SMB Service. Performing a manipulation of the argument ANONACCESS results in improper initialization. The attack can be initiated...
PT-2026-146104
A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the file etc/init.d/service smbd.sh of the component SMB Service. Performing a manipulation of the argument ANON ACCESS results in improper initialization. The attack can be initiate...
CVE-2026-126881
An improper initialization flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/575038730...
CVE-2026-126881
Improper initialization in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
Dirty-Pipe-Exploits
CVE-2022-0847 Exploits Dirty Pipe What is it ? Disclosed on March 7, 2022 by Max Kellerman2, CVE-2022-0847 is a vulnerability in the Linux kernel versions 5.8 to 5.16.11 that allows attackers to overwrite read-only or immutable files and escalate their privileges on the victim's system...
CVE-2026-126881: Google Chrome: Improper initialization in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially…
Improper initialization in Media in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-105552
An information disclosure vulnerability exists in the Windows kernel due to the improper initialization of objects in memory. An authenticated attacker could exploit this by running a specially crafted application to obtain information, potentially leading to further system compromise. The vulner...
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...
PT-2026-143344
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: net: mana: initialize gdma queue id to INVALIDQUEUEID managdcreatemanawqcq leaves queue-id as 0 from kzallocobj until manacreatewqobj assigns the firmware-returned id. If creation fails prior to this, cleanup calls managddestroyc...
CLEANSTART-2025-QL09890 flaw was found in the way xserver memory was not properly initialized
Security vulnerability affects the xorg-server package. A flaw was found in the way xserver memory was not properly initialized...
CVE-2026-103394
An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker to decrypt traffic or cause a denial of service via security policy assignment...
EUVD-2026-112222
An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker to decrypt traffic or cause a denial of service via security policy assignment...
CVE-2026-103394
The Juniper Networks Session Smart Router is affected by an Improper Initialization vulnerability (CWE-665) within its SSR software . The root cause is an incomplete operator that leads to the use of incorrect encryption keys during security policy updates. This flaw could allow an attacker to de...
CVE-2026-103394 Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.
An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker to decrypt traffic or cause a denial of service via security policy assignment...
CVE-2026-103394 Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.
An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an attacker to decrypt traffic or cause a denial of service via security policy assignment...