Fedora 45 : cri-o1.36 (2026-77abfa2cdd)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-77abfa2cdd advisory. - Update to release v1.36.6 - Resolves: rhbz2537559 - Resolves CVE-2026-17113: rhbz2523493 - Resolves: rhbz2540885 Tenable has extracted the preceding...

CVE-2026-58856: Improper Restriction of Operations within the Bounds of a Memory Buffer

In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-106162

In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58841: Improper Privilege Management

In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-104683

Name of the Vulnerable Software and Affected Versions neuropilot affected versions not specified Description A missing bounds check in neuropilot allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This flaw could enable local...

CVE-2026-55269: Improper Input Validation

In FilterCapturedPacket of snooplogger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-37705

الوصف المقترح تم العثور على ثغرة تصعيد صلاحيات في Amanda 3.5.1 يمكن أن ترفع صلاحيات مستخدم النسخ الاحتياطي إلى صلاحيات الجذر. المكوّن الضعيف هو runtar SUID وهو مجرد غلاف لتشغيل /usr/bin/tar مع وسائط محددة يمكن للمهاجم التحكم بها. لا يتحقق البرنامج بشكل صحيح من الوسائط الممررة إلى ثنائي tar يفترض ...

CVE-2017-14187_PoC_ARMv7

CVE-2017-14187 PoC Proof-of-Concept of Local Privilege Escalation for FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8, and below 5.2 Triggered by fnsysctl and USB so physical access required. This PoC spawns local root shell by exploiting CVE-2017-14187. Write-up Korean English TL;DR 1. fnsysctl cp...

Malicious code in a11y-tabindex-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce127c3e1cadd4f544a5f2580f2db030e3d9e3667d7b0e3399d85b59eb354045 a11y-tabindex-manager ships thunderboltRegistry.js, which executes an IIFE on module load that runs a series of local shell commands cat /etc/hosts,...

Malicious code in hardhat-ftp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e916c23a0efbd49d3cfcd5993957df7afbade3f454925d0672acc8c9f68245c The package's declared main entry index.js unconditionally requires./lib/config, a 4,499,968-byte obfuscator.io-packed file 26,234-entry string array...

MSC-EvilTwin-Local-Privilege-Escalation

CVE-2025-26633 - Microsoft Management Console .msc EvilTwin Local Privilege Escalation PoC Zero-day at time of disclosure March 2025 – Actively exploited in the wild by Water Gamayun APT ONLY FOR AUTHORIZED SECURITY TESTING AND RESEARCH Vulnerability Details Exploit Title : Microsoft Management...

CVE-2022-0847_dirty-pipe

CVE-2022-0847 / डर्टी पाइप हैक किया गया डर्टी पाइप CVE-2022-0847 PoC जो SUID बाइनरी को हाईजैक करके रूट शेल प्राप्त करता है। और क्षतिग्रस्त बाइनरी को पुनर्स्थापित करने का भी प्रयास करता है CVSS स्कोर : 7.8 HIGH लिनक्स कर्नेल में copypagetoiterpipe और pushpipe फ़ंक्शनों में नए पाइप बफर संरचना के...

MAL-2026-17485 Malicious code in css-scroll-anchor-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36596ba9b9d8c0f994abe3cd87783f4f0dc880e63d55374d3555347ce349fab2 Package is published as css-scroll-anchor-polyfill but its index.js is empty and its contents impersonate internal Wix thunderbolt registry module...

Copy-Fail-CVE-2026-31431-Lab

Copy Fail CVE-2026-31431 — Exploit Reproduction & Detection Lab This repository documents the end-to-end reproduction, detection engineering, and incident response for CVE-2026-31431 "Copy Fail" , a critical Linux kernel local privilege escalation vulnerability affecting kernels 4.14 through...

ghostlock-aak-apk

GhostLock AAK Launcher CVE-2026-43499 · Linux kernel rtmutex stack Use-After-Free local privilege escalation LPE loader/trigger This repository is a security research and proof-of-concept PoC project , used to demonstrate and verify the trigger flow of the CVE-2026-43499 GhostLock vulnerability i...

CVE-2020-1938

CVE-2020-1938 CVE-2020-1938 fixes errors in the PoC from https://github.com/Hancheng-Lei/Hacking-Vulnerability-CVE-2020-1938-Ghostcat.git and has been verified to work on Apache Tomcat/8.0.43. Practice Steps 1. Create docker-compose.yml 2. docker compose up -d 3. python3 CVE-2020-1938.py -p 8009 ...

CVE-2026-43786

🔐 CVE-2026-43786 🚨 تصعيد الصلاحيات المحلي في macOS — التحقق غير الصحيح من الاستحقاقات 📌 نظرة عامة CVE-2026-43786 هو ثغرة تصعيد صلاحيات محلية تؤثر على نظام macOS من Apple. ترتبط الثغرة بـ التحقق غير الصحيح من الاستحقاقات ، مما قد يسمح لتطبيق يعمل محليًا بصلاحيات منخفضة بتنفيذ عمليات تتطلب صلاحيات...

WordPress-News-and-Blog-Designer-Bundle-CVE-2025-14502

تقرير تحليل الثغرة CVE-2025-14502 نظرة عامة على الثغرة نوع الثغرة : تضمين الملفات المحلي Local File Inclusion, LFI الإصدارات المتأثرة : News and Blog Designer Bundle 1.1 وجميع الإصدارات السابقة له درجة الخطورة : عالية تعقيد الهجوم : منخفض بدون مصادقة تحليل مبدأ الثغرة 1. موقع الثغرة توجد الثغرة...

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE

NT-AUTHORITY-SYSTEM-CONTEXT-RTCORE यह एक्सप्लॉइट CVE-2019-16098 को फिर से बनाता और शोषण करता है, जो ड्राइवर माइक्रो-स्टार MSI आफ्टरबर्नर 4.6.2.15658 उर्फ RTCore64.sys और RTCore32.sys में मौजूद है, जो किसी भी प्रमाणित उपयोगकर्ता को मनमानी मेमोरी, I/O पोर्ट और MSRs में पढ़ने और लिखने की अनुमति देता...

CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-

Evolution CMS Reflected XSS v3.2.3 المؤلف: Sergio الوصف: ثغرة برمجة نصية عبر المواقع XSS منعكسة في عملية اتصال التثبيت في الإصدار evolution v.3.2.3 تسمح لمهاجم محلي بتنفيذ نصوص برمجية ويب عشوائية عبر حمولة مصمَّمة تُحقن في معامل uid. نواقل الهجوم: ثغرة في تعقيم معامل uid في عملية تثبيت قاعدة...