CVE-2023-36250

CVE-2023-36250 Vulnérabilité d'injection CSV dans le gestionnaire de temps GNOME version 3.0.2, permettant à un attaquant local d'exécuter du code arbitraire via un fichier .tsv piégé lors de la création d'un nouvel enregistrement. Type de vulnérabilité Injection CSV Découvreur Bruno Teixeira...

CVE-2024-55503

CVE-2024-55503 Termius App MacOS внедрение команд dylib Описание Проблема в Termius версии ниже v.9.9.0 позволяет локальному злоумышленнику выполнить произвольный код через вредоносный скрипт к компоненту DYLDINSERTLIBRARIES с использованием dylib. DYLDINSERTLIBRARIES=exploitcombined.dylib...

CVE-2026-21018

Переполнение буфера SveService Samsung SMR May 2026 SVE-2026-0478CVE-2026-21018 Затронутые версии: Android 14, 15, 16 Статус раскрытия: частное раскрытие Запись за пределами границ в SveService до SMR May-2026 Release 1 позволяет локальным привилегированным злоумышленникам выполнять произвольный...

CVE-2023-39063

CVE-2023-39063 Ce dépôt contient un exploit pour la vulnérabilité CVE-2023-39063 trouvée dans le logiciel RaidenFTPD v2.4.4005. L'exploit a été créé pour fonctionner avec Python 3. Détails de l'exploit Code Python 3 pour exploiter une vulnérabilité de débordement de tampon basée sur SEH dans...

CVE-2024-55504

CVE-2024-55504 Un problème dans RAR Extractor - Unarchiver Free and Pro v.6.4.0 permet aux attaquants locaux d'injecter du code arbitraire pouvant potentiellement conduire à un contrôle à distance et à un accès non autorisé à des données utilisateur sensibles via le composant exploitcombined.dyli...

DLL-Planting-Slack-4.33.73-CVE-2023-38820

DLL-Planting-Slack-4.33.73-CVE-2023-38820 Plantage DLL dans Slack 4.33.73 - CVE-2023-38820 Découvreur : Idan Malihi Description Un problème dans Slack v.4.33.73 permet à un attaquant local d'exécuter du code arbitraire via le mécanisme de chargement de DLL dans les fichiers profapi.dll,...

CVE-2024-50986

CVE-2024-50986 : Exploit de détournement de DLL pour Clementine Description : Un problème dans Clementine v.1.3.1 permet à un attaquant local d'exécuter du code arbitraire via un fichier DLL malveillant. Version concernée : Clementine v.1.3.1 Chercheur : Utkarsh r1971d3 LinkedIn Lien NIST CVE :...

CVE-2026-87723 Untrusted Search Path (PATH Hijacking) in fuse-archive

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

CVE-2026-87723 Untrusted Search Path (PATH Hijacking) in fuse-archive

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

CVE-2026-87723 Untrusted Search Path (PATH Hijacking) in fuse-archive

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

Moderate: Red Hat Security Advisory: rrdtool security update

An update for rrdtool is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

rrdtool: rrdtool: Stack buffer overflow allows local code execution or denial of service

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary...

Moderate: Red Hat Security Advisory: rrdtool security update

An update for rrdtool is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

rrdtool: rrdtool: Stack buffer overflow allows local code execution or denial of service

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary...

CVE-2026-87723: Untrusted Search Path

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

RHEL 9 : rrdtool (RHSA-2026:72277)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:72277 advisory. The round robin database RRD system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load...

RHEL 9 : rrdtool (RHSA-2026:72278)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:72278 advisory. The round robin database RRD system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load...

CVE-2026-97875 DNS rebinding vulnerability in rojo serve HTTP API

Rojo's "rojo serve" HTTP API default port 34872 has no Host/Origin header validation, making it vulnerable to DNS rebinding. A malicious webpage can read all project source, write malicious code to files on disk, and launch local programs via opener::open with no user interaction beyond visiting...

libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow

A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...

Moderate: Red Hat Security Advisory: rrdtool security update

An update for rrdtool is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...