CVE-2026-0776

CVE-2026-0776 - डिस्कॉर्ड क्लाइंट अनियंत्रित खोज पथ तत्व सारांश यह रिपॉजिटरी CVE-2026-0776 का दस्तावेजीकरण करती है, जो विंडोज़ पर डिस्कॉर्ड डेस्कटॉप क्लाइंट को प्रभावित करने वाली एक स्थानीय कोड निष्पादन समस्या है। यह भेद्यता Node.js-आधारित घटकों में असुरक्षित मॉड्यूल रिज़ॉल्यूशन व्यवहार से संबंधि...

CVE-2017-10952

CVE-2017-10952 तो यह Foxit PDF रीडर पर स्थानीय कोड निष्पादन हमले का एक उच्च-स्तरीय उदाहरण है। इस हमले का विवरण यहाँ 1 पाया जा सकता है। मैंने 1 में दिए गए इस भेद्यता के टेक्स्ट विवरण को यहाँ कॉपी-पेस्ट कर दिया है - यह विवरण vulners.com पर लेखक Root द्वारा लिखा गया था। Foxit इंस्टॉल करें...

Corsair---DLL-Planting-CVE-2023-38822

Corsair---DLL-Planting-CVE-2023-38822 Corsair iCUE v.5.3.102 CVE-2023-38822 में DLL प्लांटिंग खोजकर्ता: Idan Malihi विवरण Corsair iCUE v.5.3.102 में एक समस्या स्थानीय हमलावर को MPDC.dll, CRYPTSP.dll, dcomp.dll, profapi.dll और MSASN1.dll घटकों के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती...

DLL-Planting-Slack-4.33.73-CVE-2023-38820

DLL-Planting-Slack-4.33.73-CVE-2023-38820 Slack 4.33.73 में DLL रोपण - CVE-2023-38820 खोजकर्ता: Idan Malihi विवरण Slack Slack v.4.33.73 में एक समस्या एक स्थानीय हमलावर को profapi.dll, CRYPTBASE.dll, KBDUS.DLL, DPAPI.dll, MSASN1.dll, mf.dll, mfplat.dll, और RTWorkQ.DLL फ़ाइलों में DLL लोडिंग तंत्र ...

CVE-2024-50986

CVE-2024-50986: Эксплойт перехвата DLL для Clementine Описание: Проблема в Clementine v.1.3.1 позволяет локальному злоумышленнику выполнить произвольный код с помощью специально созданного DLL-файла. Затронутая версия: Clementine v.1.3.1 Исследователь: Utkarsh r1971d3 LinkedIn Ссылка на CVE NIST:...

CVE-2024-23998

Another Redis Desktop Manager PoC CVE-2024-23998 भेद्यता के लिए एक प्रूफ-ऑफ-कॉन्सेप्ट। 1. भेद्यता अवलोकन: भेद्यता विषय: XSS के माध्यम से स्थानीय कोड निष्पादन भेद्यता संस्करण: = 1.6.6 हमले का प्रकार: रिमोट कोड निष्पादन हमले के वेक्टर: भेद्यता का शोषण करने के लिए, हमें Setting फ़ंक्शन के लिए fontfa...

CVE-2024-55503

CVE-2024-55503 Termius App MacOS внедрение команд dylib Описание Проблема в Termius версии ниже v.9.9.0 позволяет локальному злоумышленнику выполнить произвольный код через вредоносный скрипт к компоненту DYLDINSERTLIBRARIES с использованием dylib. root@kitploit:...

CVE-2025-2783

CVE-2025-2783 محاكاة PoC لـ CVE-2025-2783 — ثغرة هروب من صندوق الحماية في Mojo IPC لمتصفح كروم. تتضمن تسليمًا عبر التصيد، واختبار تشويش الذاكرة، ومحاكاة IPC، وتسجيل الأنشطة. آمنة للعروض التجريبية للفريق الأحمر، وهندسة الكشف، والاستخدام التعليمي. يحاكي هذا المشروع إثبات مفهوم آمن وتعليمي لـ...

CVE-2026-81302

CVE-2026-81302 is currently a reserved candidate with no publicly disclosed technical details. The only record is a sighting linked to JVN (Japan Vulnerability Notes). Monitor for updates as the reserving organization publicizes the vulnerability.

CVE-2025-71408

A flaw was found in NLTK Natural Language Toolkit. This eval injection vulnerability in the nltk.collocations module allows a local attacker to execute arbitrary Python code. By manipulating command-line arguments when collocations.py is invoked directly, an attacker can bypass validation and...

kernel: pNFS: Fix use-after-free in pnfs_update_layout()

A flaw was found in the Linux kernel's parallel Network File System pNFS component. An issue in the pnfsupdatelayout function causes a use-after-free vulnerability due to incorrect ordering of memory management operations. This flaw can be triggered when the system attempts to update a pNFS layou...

EUVD-2026-70851

Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root...

EUVD-2026-70652

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

CVE-2026-85028 Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit aws-fpga before 2.3.4 might allow local users to execute arbitrary code with root privileges via crafted shell content placed at a predictable path ...

CVE-2026-62897

A flaw was found in .NET Framework. This integer overflow or wraparound vulnerability allows an unauthorized attacker to execute code locally. By exploiting this flaw, an attacker could gain control over the affected system. Mitigation No mitigation is required. Red Hat's .NET packages do not shi...

CVE-2026-70354

A flaw was found in .NET. This vulnerability, caused by an out-of-bounds write, could allow an unauthorized attacker to execute code locally. Exploitation requires local access and user interaction, but if successful, it can lead to significant impact on the system's confidentiality, integrity, a...

CVE-2026-62871

A flaw was found in .NET. An out-of-bounds write vulnerability allows an unauthorized attacker to execute arbitrary code locally. This could lead to a complete compromise of the affected system. Mitigation No mitigation is required. Red Hat's .NET packages do not ship the Windows Desktop runtime...

kernel: pNFS: Fix use-after-free in pnfs_update_layout()

A flaw was found in the Linux kernel's parallel Network File System pNFS component. An issue in the pnfsupdatelayout function causes a use-after-free vulnerability due to incorrect ordering of memory management operations. This flaw can be triggered when the system attempts to update a pNFS layou...

kernel: pNFS: Fix use-after-free in pnfs_update_layout()

A flaw was found in the Linux kernel's parallel Network File System pNFS component. An issue in the pnfsupdatelayout function causes a use-after-free vulnerability due to incorrect ordering of memory management operations. This flaw can be triggered when the system attempts to update a pNFS layou...

Linux Distros Unpatched Vulnerability : CVE-2026-84334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Chromoting in Google Chrome on on Windows prior to 152.0.7977.75 allowed a local attacker to execute arbitrary code outside the sandb...