CVE-2026-105249

A use after free vulnerability exists in vgmstream up to version r2117 . The flaw is located within the TXTP File Handler component, specifically impacting the make_group_random function in the file src/meta/txtp_process.c . This issue can be triggered via a local attack . To remediate this vulne...

CVE-2026-105249 vgmstream TXTP File txtp_process.c make_group_random use after free

A weakness has been identified in vgmstream up to r2117. This impacts the function makegrouprandom of the file src/meta/txtpprocess.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...

EUVD-2026-92276

A weakness has been identified in vgmstream up to r2117. This impacts the function makegrouprandom of the file src/meta/txtpprocess.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...

CVE-2026-105249 vgmstream TXTP File txtp_process.c make_group_random use after free

A weakness has been identified in vgmstream up to r2117. This impacts the function makegrouprandom of the file src/meta/txtpprocess.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...

CVE-2026-105249 vgmstream TXTP File txtp_process.c make_group_random use after free

A weakness has been identified in vgmstream up to r2117. This impacts the function makegrouprandom of the file src/meta/txtpprocess.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...

ExploitVelotiSmart

ExploitVelotiSmart تتيح استغلال ثغرة LFI CVE-2018-14064 https://medium.com/@s1kr10s/velotismart-0day-ca5056bcdcac https://www.exploit-db.com/exploits/45030/...

rewolf-msi-exploit

rewolf-msi-exploit تصعيد الامتيازات المحلية عبر MSI NTIOLib/WinIO يمكن العثور على مزيد من المعلومات هنا: http://blog.rewolf.pl/blog/?p=1630...

LGPwn

LGPwn استغلال صلاحيات الجذر لأجهزة LG المؤلف: [email protected] شكر خاص: جوجي، لإشارته إلى ملف ثنائي غريب في تحديث spritebud، وهو ما قادني إلى اكتشاف هذه الثغرة. الموضوع: حالة سباق Race condition في برنامج النسخ الاحتياطي لشركة Sprite Software، المثبّت من قِبل المُصنّع الأصلي OEM على أجهزة L...

CVE-2026-100727

An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as "Local"...

CVE-2026-31431

CVE-2026-31431 "Copy Fail" - أداة بحث واختبار اختراق ⚠️ إخلاء المسؤولية يُقدم هذا المشروع حصريًا لـ: البحث الأمني الأغراض التعليمية اختبار الاختراق المصرح به بيئات CTF والمختبرات باستخدامك لهذه الأداة، فإنك توافق على أن: أنك تملك النظام المستهدف أو أنك حصلت على إذن كتابي صريح لاختبار الهدف لن...

CVE-2023-46018-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46018-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability Exploit Author: ersinerenler الصفحة الرئيسية للبائع https://code-projects.org/blood-bank-in-php-with-source-code رابط البرنامج https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip نظرة عامة بنك ال...

CVE-2021-1675---PrintNightmare-LPE-PowerShell-

CVE-2021-1675 - ترقية الامتيازات المحلية لـ PrintNightmare PowerShell كاليب ستيوارت | جون هاموند | 1 يوليو 2021 CVE-2021-1675 هي ثغرة أمنية حرجة لتنفيذ التعليمات البرمجية عن بُعد ورفع الامتيازات المحلية تُعرف باسم "PrintNightmare". تم إصدار استغلالات إثبات المفهوم Python، C++ لقدرة تنفيذ التعليما...

CVE-2023-43874-e107-CMS-Stored-XSS---MetaCustomTags

e107 CMS XSS مخزنة v2.3.2 المؤلف: Sergio الوصف: تحتوي e107 CMS v.2.3.2 على ثغرة متعددة من نوع Cross Site Scripting XSS تسمح لمهاجم محلي بتنفيذ كود تعسفي عبر سكربت مخصص في حقلي حقوق النشر والمؤلف في قائمة Meta & Custom Tags Menu. متجهات الهجوم: البرمجة النصية. تسمح ثغرة في تعقيم الإدخال في حقلي...

EUVD-2026-92265

An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as "Local"...

CVE-2026-100727

An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as "Local"...

CVE-2026-100727

An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as "Local"...

CVE-2026-100727

An improper access control vulnerability exists in GROWI that allows an unauthenticated attacker to read files located on non-public pages. This vulnerability is specifically triggered when the file upload setting is configured as "Local" . The impact is the unauthorized disclosure of files, and ...

CVE-2024-50986

CVE-2024-50986: Clementine के लिए DLL हाइजैकिंग शोषण विवरण: Clementine v.1.3.1 में एक समस्या एक स्थानीय हमलावर को क्राफ्टेड DLL फ़ाइल के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती है। प्रभावित संस्करण: Clementine v.1.3.1 शोधकर्ता: Utkarsh r1971d3 LinkedIn NIST CVE लिंक:...

CVE-2024-48990

CVE-2024-48990 POC अवलोकन क्वालिस ने पाया कि needrestart, संस्करण 3.8 से पहले, स्थानीय हमलावरों को PYTHONPATH पर्यावरण चर को नियंत्रित करके needrestart को पायथन इंटरप्रेटर चलाने के लिए प्रेरित करके रूट के रूप में मनमाना कोड निष्पादित करने की अनुमति देता है। यह रिपॉजिटरी CVE-2024-48990 के लिए एक...

CVE-2025-47423

CVE-2025-47423 – Local File Inclusion in Personal Weather Station Dashboard 12lts Discovered by: Matthew Eagle Status: Public Disclosure Date Reported: 2025-05-05 CVE ID: CVE-2025-47423 🧩 Summary A Local File Inclusion LFI vulnerability in the Personal Weather Station Dashboard version 12lts allo...