CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits Una raccolta di exploit e documentazione per penetration tester e red teamer, utile per agevolare lo sfruttamento della vulnerabilità Linux Dirty Pipe. Informazioni sulla vulnerabilità Dirty Pipe CVE-2022-0847 è una vulnerabilità di escalation dei privilegi locale...

CVE-2021-1732

CVE-2021-1732 CVE-2021-1732 Microsoft Windows 10 lokale Rechteausweitung Sicherheitslücke – Forschung und Poc/Exploit-Entwicklung Betroffene Systeme und Anwendungsversionen Windows Server, Version 20H2 Server Core-Installation Windows 10 Version 20H2 für ARM64-basierte Systeme Windows 10 Version...

KDE_Vuln

KDE vFAT भेद्यता पर विचार 1: दायरा उतना बड़ा नहीं है जितना मैंने पहले सोचा था। अधिकांश सिस्टम संभवतः KDE के नए संस्करणों में अपडेट हो चुके हैं या कोई भिन्न GUI चला रहे हैं। हालाँकि, सटीक आँकड़ा पाने के लिए मुझे कुछ वास्तविक आँकड़ों को देखना होगा। किसी मशीन तक भौतिक पहुँच प्राप्त करना अपने आप में ...

CVE-2022-0847-DirtyPipe-Exploits

CVE-2022-0847-DirtyPipe-Exploits Una collezione di exploit e documentazione per penetration tester e red teamer che può essere utilizzata per agevolare lo sfruttamento della vulnerabilità Dirty Pipe di Linux. Informazioni sulla vulnerabilità Dirty Pipe CVE-2022-0847 è una vulnerabilità di...

CVE-2026-40684 vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-71131

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

kubeshark-cli-53.4.0-1.1 on GA media (moderate)

kubeshark-cli-53.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11519-1 Rating: moderate Cross-References: CVE-2026-49445 CVSS scores: CVE-2026-49445 SUSE : 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...

PT-2026-76572

Name of the Vulnerable Software and Affected Versions Etherpad versions prior to 3.1.0 Description Files src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts generate temporary filenames using Math.random, which is not cryptographically secure and predictable across calls withi...

EUVD-2026-57623

IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...

CVE-2026-72898

creationtimestamp| type| source ---|---|--- 2026-08-10 18:04:27+00:00| seen| https://infosec.exchange/users/wdormann/statuses/117072531713464991 2026-08-10 18:04:38+00:00| seen| https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msqorw2bpc22 2026-08-10 18:56:56+00:00| seen|...

EUVD-2026-55626

systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...

CVE-2026-21067

Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

Astra Linux – Vulnerability in cups

OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and earlier, a local unprivileged user could force cupsd to authenticate against a localhost IPP service controlled by the attacker, using a reusable “Authorization: Local…”...

EUVD-2026-54977

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...

EUVD-2026-54959

A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component uploaddocument. Performing a manipulation of the argument File results in path traversal. Attacking...

EUVD-2026-54907

A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4. The affected element is the function processGenerateRequest of the file mcpservers/mermaid/index.ts of the component generatemermaidmarkdown. The manipulation of the argument folder/name leads to path traversal. The attack...

EUVD-2026-54885

A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0. This vulnerability affects the function getSkillVersionsDir of the file src/svc/utils/config.ts. Such manipulation of the argument skillName leads to path traversal. The attack can only be performed from a local...

CVE-2026-19191

A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vulnerability affects unknown code of the file C:\Program Files\StableBit\DrivePool\DrivePool.Service.exe of the component DrivePoolService. Such manipulation leads to permission issues. The attack must be carried...

EUVD-2026-54087

A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24. This affects the function executeArbitraryCommand/executeCommand of the file src/ludusMCP/cliWrapper.ts of the component luduscliexecute. Performing a manipulation of the argument command/args results in command injection. The...

CVE-2026-18852

The CVE concerns epsilla-cloud vectordb up to version 0.3.18 with a flaw in the Filter Parser’s engine/query/expr/expr.cpp, specifically in SplitTokens/ShuntingYard. The issue is described as an improper check for unusual conditions, allowing a local attacker to exploit the vulnerability. The exp...