Lucene search
+L

2496 matches found

Kitploit
Kitploit
added 2026/08/31 11:42 p.m.5 views

Browser-Pwning-

Browser-Pwning A proper well structured documentation for getting started with chrome pwning & v8 pwning Structure of document How this doc is organised 1. Motivation 2. Actual Study Material Motivation Browsers are one of today’s most used pieces of technology. On every off the shelf computer, i...

5.4AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/31 2:43 p.m.3 views

TFC-Chrome-v8-bug-CVE-2021-38001-poc

TFC-Chrome-v8-bug-CVE-2021-38001-poc ejecuta d8 con la línea de comandos: ./d8 2.mjs...

8.8CVSS8.1AI score0.26703EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.4 views

Fedora 43 : python3.11 (2026-22170bd5c0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-22170bd5c0 advisory. Security release of Python 3.11 interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

8.7CVSS7.6AI score0.00672EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/25 3:42 p.m.8 views

EUVD-2026-65550

mcp-shell is an MCP server for running shell commands securely, auditably, and on demand. Prior to 0.6.0, config.go initializes Security.Enabled to false, and when MCPSHELLSECCONFIGFILE is unset, main.go starts the documented bare-binary deployment without a security policy...

8.6CVSS5.5AI score0.00151EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2026/08/25 12:00 a.m.4 views

The vulnerability of the btf_func_proto_check() function in the kernel/bpf/btf.c module, which supports the BPF interpreter of the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the btffuncprotocheck function in the kernel/bpf/btf.c module, which is part of the Linux kernel’s BPF support, relates to incorrect checking of the type of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.3AI score0.00181EPSS
SaveExploits0References6Affected Software2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in GhostScript

Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in the sampleddatasample function called from sampleddatacontinue and interp...

5.5CVSS6AI score0.0136EPSS
SaveExploits1References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.7 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: fs/binfmtelf: A memory leak was fixed in loadelfbinary. There is also a memory leak reported by kmemleak: Unreferenced object: 0xffff88817104ef80 size: 224 Reported by comm "xfsadmin", pid 47165, jiffies: 4298708825 age: 1333.476...

5.5CVSS5.9AI score0.00155EPSS
SaveExploits0References2
Fedora
Fedora
added 2026/08/19 1:12 a.m.7 views

[SECURITY] Fedora 43 Update: python3.14-3.14.7-1.fc43

Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...

8.7CVSS5.3AI score0.0075EPSS
SaveExploits0
Fedora
Fedora
added 2026/08/19 1:03 a.m.10 views

[SECURITY] Fedora 44 Update: python3.12-3.12.14-1.fc44

Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...

7.8CVSS7.4AI score0.0075EPSS
SaveExploits0
NVD
NVD
added 2026/08/18 4:18 p.m.6 views

CVE-2026-75858

CodeWhale packages codewhale / codewhale-tui versions = 0.8.41 and 0.8.64 contain a remote code execution vulnerability in the rlmeval tool. The tool's approvalrequirement returns ApprovalRequirement::Auto, which the engine treats as 'never prompt,' causing arbitrary model-supplied Python code to...

8.5CVSS0.00267EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/18 3:21 p.m.21 views

CVE-2026-75858

CodeWhale packages codewhale / codewhale-tui versions = 0.8.41 and 0.8.64 contain a remote code execution vulnerability in the rlmeval tool. The tool's approvalrequirement returns ApprovalRequirement::Auto, which the engine treats as 'never prompt,' causing arbitrary model-supplied Python code to...

8.5CVSS6.8AI score0.00267EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/08/18 3:11 p.m.15 views

CVE-2026-68939 Pyenv: Glob/wildcard metacharacters bypass is_version_safe(), causing silent version/interpreter substitution via unquoted expansion (CVE-2022-35861 residual)

Pyenv provides simple Python version management. Prior to 2.8.0, isversionsafe in libexec/pyenv-version-file-read accepts shell glob metacharacters in .python-version values, and unquoted PYENVVERSION expansion in libexec/pyenv-version-name, libexec/pyenv-which, libexec/pyenv-prefix,...

2CVSS5.4AI score
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/08/18 3:11 p.m.9 views

CVE-2026-68939 Pyenv: Glob/wildcard metacharacters bypass is_version_safe(), causing silent version/interpreter substitution via unquoted expansion (CVE-2022-35861 residual)

Pyenv provides simple Python version management. Prior to 2.8.0, isversionsafe in libexec/pyenv-version-file-read accepts shell glob metacharacters in .python-version values, and unquoted PYENVVERSION expansion in libexec/pyenv-version-name, libexec/pyenv-which, libexec/pyenv-prefix,...

2CVSS5.3AI score0.00171EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/18 3:11 p.m.23 views

CVE-2026-68939

Pyenv provides simple Python version management. Prior to 2.8.0, isversionsafe in libexec/pyenv-version-file-read accepts shell glob metacharacters in .python-version values, and unquoted PYENVVERSION expansion in libexec/pyenv-version-name, libexec/pyenv-which, libexec/pyenv-prefix,...

2CVSS5.3AI score0.00171EPSS
SaveExploits0References4Affected Software1
Anthropic
Anthropic
added 2026/08/17 5:47 p.m.6 views

ANT-2026-V6YZYDKK · FreeType2 · Stack Buffer Overflow

stack-buffer-overflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-V6YZYDKK: Stack buffer overflow via pop aft...

6.1AI score
SaveExploits0
OSV
OSV
added 2026/08/15 12:27 p.m.12 views

CVE-2026-74487 binfmt_misc: restore write access when removing an entry

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: restore write access when removing an entry Registering an entry with the MISCFMTOPENFILE flag opens the interpreter via openexec which denies write access to it for as long as the entry exists. Removing the entry...

5.5AI score
SaveExploits0References11
CVE
CVE
added 2026/08/15 12:27 p.m.38 views

CVE-2026-74486

The CVE-2026-74486 entry describes a Linux kernel vulnerability in binfmt_misc where load_misc_binary() clones the interpreter file and denies write access with exe_file_deny_write_access(), while the exec path later calls exe_file_allow_write_access(). This mismatch can cause repeated write-deni...

5.4AI score0.00177EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/08/15 12:27 p.m.8 views

CVE-2026-74486

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: use exefiledenywriteaccess for the interpreter clone For MISCFMTOPENFILE entries loadmiscbinary clones the registered interpreter file and denies write access to the clone via plain denywriteaccess. The clone is...

5.4AI score0.00177EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/08/11 12:00 a.m.5 views

The vulnerability of the Python programming language interpreter, related to deficiencies in pathname restrictions for directories, allows attackers to compromise data integrity.

The vulnerability of the Python programming language interpreter is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow attackers to compromise data integrity...

3.3CVSS4.6AI score0.00238EPSS
SaveExploits0References15Affected Software5
NVD
NVD
added 2026/08/10 1:20 p.m.9 views

CVE-2026-68186

In the Linux kernel, the following vulnerability has been resolved: binfmtmisc: set haveexecfd only once the interpreter is opened loadmiscbinary raises bprm-haveexecfd as soon as it sees the 'O' or 'C' flag. This happens well before it opens the interpreter. If that open fails the flag stays set...

0.0021EPSS
SaveExploits0References8
Rows per page
Query Builder