CVE-2017-5487-EXPLOIT

CVE-2017-5487 - Énumération d'utilisateurs WordPress Une vulnérabilité a été découverte dans l'implémentation de l'API REST de WordPress 4.7 avant 4.7.1. Cette vulnérabilité est présente dans le fichier class-wp-rest-users-controller.php situé dans wp-includes/rest-api/endpoints. Le défaut provie...

LinksysLeaks

LinksysLeaks Скрипт на Python3 для сканирования устройств Linksys smart wifi, уязвимых для CVE-2014-8244 Этот скрипт был создан, чтобы помочь мне найти уязвимые smart wifi устройства, которые утекают конфиденциальную информацию, известную как CVE-2014-8244. У вас есть возможность сканировать либо...

CVE-2023-42829

CVE-2023-42829; «Приложение может получить доступ к SSH-паролям» В этом документе представлен как анализ логической уязвимости, обнаруженной в бинарном файле ssh в macOS моя первая уязвимость в программном обеспечении!, так и анализ исправления, демонстрирующий, как Apple устранила уязвимость. Я...

CVE-2006-3392

CVE-2006-3392 À propos de la vulnérabilité Une vulnérabilité a été signalée dans Webmin et Usermin, qui peut être exploitée par des personnes malveillantes pour divulguer des informations potentiellement sensibles. La vulnérabilité est due à une erreur non spécifiée dans le traitement d'une URL...

CVE-2026-76042

A flaw was found in Google Chrome, specifically within its GPU component, where an uninitialized resource could be used. A remote attacker, after compromising the renderer process, could exploit this by crafting a malicious HTML page. This could allow the attacker to read memory outside of the...

CVE-2026-76041

A flaw was found in chromium-browser. An information leak in the Skia component allows a remote attacker to potentially bypass the web origin policy by crafting a malicious HTML page. This could lead to unauthorized access to sensitive information across different web origins. Mitigation Avoid...

CVE-2026-76039

A flaw was found in Chromium, specifically in its Core component on Android. This vulnerability, caused by incorrect reference resolution, allows a remote attacker to obtain sensitive information. By leveraging social engineering and a specially crafted HTML page, an attacker could exploit this...

CVE-2022-44268

CVE-2022-44268 ImageMagick 7.1.0-49 vulnérable à la divulgation d'informations Utilisation exploit.sh sh exploit.sh L'image de sortie est stockée dans output.png getdata.sh sh getdata.sh Source https://www.metabaseq.com/threat/imagemagick-zero-days/...

BIT-POSTGRESQL-2026-14668 PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read

Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input. While the calculation loses precision, substantial memory value recovery...

BIT-KIBANA-2026-72666 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Query Execution on Managed Hosts

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized query execution against Elastic Agents that are assigned to a Kibana space the requesting user has no access to, via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A user who is authoriz...

BIT-ELK-2026-72670 Exposure of Sensitive Information to an Unauthorized Actor in Kibana Leading to Disclosure of Fleet Proxy Credentials

A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy. This would normally require the Fleet privilege to read settings.The proxy configuration possibly contains proxy authentication credentials and private key...

BIT-ELK-2026-72666 Authorization Bypass Through User-Controlled Key in Kibana Leading to Unauthorized Query Execution on Managed Hosts

Authorization Bypass Through User-Controlled Key CWE-639 in Kibana can lead to unauthorized query execution against Elastic Agents that are assigned to a Kibana space the requesting user has no access to, via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. A user who is authoriz...

CVE-2026-75900

An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...

CVE-2026-6368

creationtimestamp| type| source ---|---|--- 2026-08-19 08:09:54+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3mtgbqtkneu2h...

Eaton-Intelligent-Power-Manager-Local-File-Inclusion

Eaton-Intelligent-Power-Manager-Local-File-Inclusion Inclusion locale de fichier dans Eaton Intelligent Power Manager v1.6 permet à un attaquant d'inclure un fichier, ce qui peut entraîner la divulgation d'informations sensibles, un déni de service et une exécution de code. CVE-2018-12031 Pour...

MINI-8V39-V7X2-9FH3

Bulletin has no description...

CVE-2026-75900

An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...

EUVD-2026-62338

To retrieve the previous timer value, the kernel calls realtimergettime, which obtains the current time for the timer's clock. For a timer using CLOCKTAI this can fail when no TAI offset has been configured, but the error return was not checked, so the uninitialized output buffer was copied to...

EUVD-2026-62346

The compat32 kevent handler translates a 64-bit kevent struct into a stack- declared 32-bit struct. It did not first zero the stack struct. An unprivileged user may observe a small amount of uninitialized kernel stack data, which may contain sensitive information...

EUVD-2026-62345

The Linux waitid implementation translates a FreeBSD siginfot struct into a stack-declared Linux siginfot. It did not first zero the stack struct. An unprivileged user may observe 104 bytes of uninitialized kernel stack data, which may contain sensitive information...