289510 matches found
Fedora 45 : cri-o1.36 (2026-77abfa2cdd)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-77abfa2cdd advisory. - Update to release v1.36.6 - Resolves: rhbz2537559 - Resolves CVE-2026-17113: rhbz2523493 - Resolves: rhbz2540885 Tenable has extracted the preceding...
PT-2026-105990
In Progress® Telerik® Fiddler® Classic for Windows, versions prior to v6.0.20262.10021, the integrity check applied to the external helper tools launched by the application is insufficient. Before executing a helper tool, the application only verifies that the file carries a valid Authenticode...
CVE-2026-20533: Integer Overflow or Wraparound
In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11296678; Issue ID: MSV-9167...
PT-2026-104693
Name of the Vulnerable Software and Affected Versions Display affected versions not specified Description An integer overflow in display allows for a local escalation of privilege. This occurs if a malicious actor has already obtained System privilege. Exploitation does not require user...
PT-2026-106165
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition in the handle app val response function within btif rc.cc allows for potential code execution. This issue can lead to local escalation of...
CVE-2026-58880: Concurrent Execution using Shared Resource with Improper Synchronization
In handleappvalresponse of btifrc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-106156
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An incorrect bounds check in the stpropnci process function within stpropnci.cc allows for a possible out-of-bounds write. This condition can be leveraged to...
PT-2026-104704
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS110495...
CVE-2026-55286: Improper Restriction of Operations within the Bounds of a Memory Buffer
In stpropnciprocess of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-106161
In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-58854: Access of Resource Using Incompatible Type
In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-20537: Use After Free
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11185225; Issue ID: MSV-9024...
PT-2026-104690
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the display component allows for an out-of-bounds write, which is a condition where data is written outside the intended memory boundar...
CVE-2022-37705
الوصف المقترح تم العثور على ثغرة تصعيد صلاحيات في Amanda 3.5.1 يمكن أن ترفع صلاحيات مستخدم النسخ الاحتياطي إلى صلاحيات الجذر. المكوّن الضعيف هو runtar SUID وهو مجرد غلاف لتشغيل /usr/bin/tar مع وسائط محددة يمكن للمهاجم التحكم بها. لا يتحقق البرنامج بشكل صحيح من الوسائط الممررة إلى ثنائي tar يفترض ...
CVE-2017-14187_PoC_ARMv7
CVE-2017-14187 إثبات المفهوم إثبات المفهوم لتصعيد الامتيازات المحلية لـ FortiOS 5.6.0 إلى 5.6.2، 5.4.0 إلى 5.4.8، وأقل من 5.2 يتم تشغيله بواسطة fnsysctl و USB لذا يلزم الوصول الفعلي. يقوم إثبات المفهوم هذا بإطلاق شيل جذر محلي من خلال استغلال CVE-2017-14187. شرح الكورية الإنجليزية TL;DR 1. fnsysct...
Malicious code in a11y-tabindex-manager (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce127c3e1cadd4f544a5f2580f2db030e3d9e3667d7b0e3399d85b59eb354045 a11y-tabindex-manager ships thunderboltRegistry.js, which executes an IIFE on module load that runs a series of local shell commands cat /etc/hosts,...
Malicious code in hardhat-ftp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e916c23a0efbd49d3cfcd5993957df7afbade3f454925d0672acc8c9f68245c The package's declared main entry index.js unconditionally requires./lib/config, a 4,499,968-byte obfuscator.io-packed file 26,234-entry string array...
MSC-EvilTwin-Local-Privilege-Escalation
CVE-2025-26633 - Élévation de privilèges locale EvilTwin via Microsoft Management Console .msc - Preuve de concept Zero-day au moment de la divulgation mars 2025 – Exploité activement dans la nature par Water Gamayun APT UNIQUEMENT POUR LES TESTS DE SÉCURITÉ ET LA RECHERCHE AUTORISÉS Détails de l...
CVE-2022-0847_dirty-pipe
CVE-2022-0847 / Dirty Pipe استغلال PoC مُعدَّل لثغرة Dirty Pipe CVE-2022-0847 يختطف ثنائي SUID لتشغيل قشرة بصلاحيات الجذر. وكذلك يحاول استعادة الثنائي المتضرر النتيجة CVSS : 7.8 HIGH تم اكتشاف خطأ في الطريقة التي يفتقر بها عضو "flags" في بنية مخزن الأنابيب الجديد إلى تهيئة صحيحة في دالتي...
MAL-2026-17485 Malicious code in css-scroll-anchor-polyfill (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 36596ba9b9d8c0f994abe3cd87783f4f0dc880e63d55374d3555347ce349fab2 Package is published as css-scroll-anchor-polyfill but its index.js is empty and its contents impersonate internal Wix thunderbolt registry module...