961777 matches found
Exploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
Technical Analysis of Log4Shell CVE-2021-44228 Video P...
CVE-2026-108581
TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers. Attackers can query these endpoints, which only validate the JWT, to obtain...
CVE-2026-108582
GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...
EUVD-2026-96365
GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...
CVE-2026-108582 GenOffice through 0.11.505 Insecure Permissions in HTTP MCP Server File Store
GenOffice through 0.11.505 contains an incorrect permissions vulnerability in its HTTP MCP server file store that allows local unprivileged users to read uploaded and generated documents. Attackers can list the world-readable genoffice-mcp-http directory under the system temporary directory to re...
CVE-2026-108582
The software GenOffice (versions through 0.11.505) is vulnerable to an incorrect permissions flaw in its HTTP MCP server file store . This vulnerability allows local unprivileged users to read uploaded and generated documents by listing the world-readable genoffice-mcp-http directory located in t...
CVE-2026-108581 Octop through 1.0.2b6 Missing Authorization Exposes Provider API Keys via /api/providers
TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers. Attackers can query these endpoints, which only validate the JWT, to obtain...
EUVD-2026-96364
TencentCloud Octop through 1.0.2b6 contains a missing authorization vulnerability that allows authenticated low-privileged users to read stored provider API keys via GET /api/providers and GET /api/voice/providers. Attackers can query these endpoints, which only validate the JWT, to obtain...
CVE-2026-108581
TencentCloud Octop versions through 1.0.2b6 are vulnerable to a missing authorization flaw (CWE-862). Authenticated users with low privileges can access the GET /api/providers and GET /api/voice/providers endpoints, which only validate the JWT without sufficient permission checks. This allows att...
CVE-2026-98380
A flaw was found in the Linux kernel's traffic control subsystem. A local attacker with network configuration privileges can exploit a race condition during traffic control action deletion to cause a Denial of Service DoS by crashing the system. Due to missing error validation during action...
CVE-2026-98379
A flaw was found in the Linux kernel's netfilter subsystem. An unprivileged local user can cause a Denial of Service DoS by triggering a system crash through a null pointer dereference an attempt to access invalid memory. This issue occurs during IPv6 reverse-path filtering when the kernel...
EUVD-2026-96342
AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-shared-var endpoint. Attackers can enumerate sequential shared variable IDs and decrypt all-users variables re-encrypted...
EUVD-2026-96314
ExtUtils::Typemaps::STL::String versions before 1.06 for Perl TSTDSTRING typemap may read the SV length before stringifying the argument. The typemap uses $var = std::string SvPVnolen$arg, SvCUR$arg However, evaluation order for C++ arguments is not specified, and some compilers may produce code...
EUVD-2026-96317
Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers. Attackers can rotate spoofed X-Forwarded-For values against /api/auth/signIn,...
bunyip
Offline VulnDB Offline VulnDB is a lightweight vulnerability...
CVE-2026-108547
AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-shared-var endpoint. Attackers can enumerate sequential shared variable IDs and decrypt all-users variables re-encrypted...
CVE-2026-98352
A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Transport client driver. A race condition occurs when a connection setup attempt is interrupted during teardown, causing shared Completion Queue CQ resources to be retained without being released. This flaw may allow an...
CVE-2026-98350
A flaw was found in the Linux kernel's Broadcom FullMAC brcmfmac wireless driver. During external Wi-Fi authentication, an uninitialized data structure can leak sensitive kernel stack memory directly to the device firmware when processing short network names or key identifiers. A local user or an...
CVE-2026-108547
The AstronRPA software (versions through 1.1.6 ) is vulnerable to a cross-tenant shared variable disclosure due to a missing tenant authorization check in the robot-service component. Specifically, authenticated users can access the get-batch-shared-var endpoint to read shared variables belonging...
CVE-2026-108547 AstronRPA through 1.1.6 Cross-Tenant Shared Variable Disclosure via get-batch-shared-var
AstronRPA through 1.1.6 contains a missing tenant authorization check in robot-service that allows authenticated users to read other tenants' shared variables via the get-batch-shared-var endpoint. Attackers can enumerate sequential shared variable IDs and decrypt all-users variables re-encrypted...