289506 matches found
CVE-2026-105293
Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the Discord origin, such as through XSS, can abuse themes.folder, themes.uninstall...
CVE-2025-4524
CVE-2025-4524 Thème Madara pour WordPress 2.2.2.1 - Inclusion de fichier local...
CVE-2026-105293
Legcord versions 1.1.0 through 1.3.0 are vulnerable to a path traversal vulnerability within the theme IPC handlers. The root cause is the use of unvalidated theme ids , which allows scripts running in the Discord origin (e.g., via XSS ) to escape the designated themes directory. Attackers can ab...
CVE-2026-105293 Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers
Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the Discord origin, such as through XSS, can abuse themes.folder, themes.uninstall...
EUVD-2026-92157
Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory via unvalidated theme ids. Attackers running script in the Discord origin, such as through XSS, can abuse themes.folder, themes.uninstall...
CVE-2026-50656-rogueplanet-validation
Rapport de validation du PoC RoguePlanet pour Microsoft Defender Objectif et portée du rapport Ce rapport concerne la validation du PoC RoguePlanet décrit publiquement et lié à Microsoft Defender. La technique décrite a été présentée dans les médias le 10 juin 2026 comme une élévation de privilèg...
ghostlock-cve-2026-43499-4.19-k40
GhostLock — PoC CVE-2026-43499 noyau Qualcomm 4.19 Élévation de privilèges locale exploitant CVE-2026-43499 — un bug rtmutex removewaiter qui laisse un struct rtmutexwaiter pendant sur la pile noyau du waiter kernel/locking/rtmutex.c, CWE-416 use-after-free. Adapté de NebuSec/CyberMeowfia...
cve-2026-64560-a16
CVE-2026-64560 — Chaîne d'outils + portage multi-cibles CVE-2026-64560 est un use-after-free dans posix-cpu-timers du noyau Linux race locale non privilégiée, CVSS 3.1 = 7.8 ; non corrigé en 6.6.118, corrigé seulement en 6.6.147. Ce dépôt fait deux choses : transformer la chaîne d'outils amont,...
By-Poloss..-..CVE-2026-7515-PoC
CVE-2026-7515: BetterDocs Pro views-get"layouts/encyclopedia/$docstyle", 'doc' = $doc, 'excerpt' = $excerpt, 'dictionarylearnmoretext' = $learnmoretext, 'itemheadingtag' = $itemheadingtag, ; المشكلة: يتم إدراج متغير $docstyle المُتحكَّم به من قبل المستخدم مباشرة في...
CVE-2026-43499-pmg110-root
pmg110-root CVE-2026-43499 futex PI, use-after-free de rtmutexwaiter escalade de privilèges locale, porté sur le OPPO PMG110 / K15 Pro+ — MediaTek MT6991, ColorOS 16. Un seul fichier poussé, lancé via LDPRELOAD : adb push out/preload-pmg110-16.0.9.400.so /data/local/tmp/preload.so adb shell chmod...
CVE-2026-28641: Undefined Security Weakness
In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
PT-2026-106254
Name of the Vulnerable Software and Affected Versions Docling versions 2.107.0 through 2.120.2 Description In the ODF backend, the software improperly handles the xlink:href attribute of a draw:image element. When a referenced part is not found within the document archive, the image ref from odf...
PT-2026-106150
Name of the Vulnerable Software and Affected Versions MessageQueueBase.h affected versions not specified Description An incorrect bounds check in multiple functions within MessageQueueBase.h allows for a possible out-of-bounds read. This condition can be leveraged to achieve local escalation of...
CVE-2026-105679: Improper Neutralization of Input During Web Page Generation
Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...
PT-2026-106147
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Multiple functions within nfa nfcee act.cc are susceptible to an out-of-bounds write, which occurs when data is written outside the intended memory boundary due ...
EUVD-2026-92786
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...
PT-2026-104691
Name of the Vulnerable Software and Affected Versions apu affected versions not specified Description A memory corruption issue exists due to a use after free, which occurs when a program continues to use a pointer after it has been freed. This can lead to local escalation of privilege without...
PT-2026-104705
Name of the Vulnerable Software and Affected Versions vdec affected versions not specified Description A type confusion issue in vdec allows for an out-of-bounds write, which occurs when a program writes data past the end of a buffer. This can lead to local escalation of privilege if a malicious...
PT-2026-106173
Name of the Vulnerable Software and Affected Versions sssd affected versions not specified Description A flaw allows a local user to cause a Denial of Service DoS by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the...
CVE-2026-28640: Undefined Security Weakness
In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...