CVE-2026-58854: Access of Resource Using Incompatible Type

In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49937: Improper Restriction of Operations within the Bounds of a Memory Buffer

In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-104704

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS110495...

CVE-2026-97876

A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while GRUB continues to report lockdown is enabled. The vulnerability is caused by insufficient validation of the MMIO base address passed to th...

PT-2026-106227

Name of the Vulnerable Software and Affected Versions Newell Brands DYMO ID versions prior to 1.6.0 Description The software parses job files using the XmlDocument.Load function without disabling Document Type Definition DTD processing. The PC Job Files view automatically parses all recognized jo...

CVE-2026-28647: Undefined Security Weakness

In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-104744

A weakness has been identified in vgmstream up to r2117. This impacts the function make group random of the file src/meta/txtp process.c of the component TXTP File Handler. This manipulation causes use after free. The attack needs to be launched locally. Patch name:...

PT-2026-104707

Name of the Vulnerable Software and Affected Versions mtee affected versions not specified Description A type confusion issue exists in mtee, which may allow a local escalation of privilege. This occurs if a malicious actor has already obtained System privilege. Exploitation does not require user...

CVE-2026-63268: Exposure of Sensitive Information to an Unauthorized Actor

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

PT-2026-106198

Name of the Vulnerable Software and Affected Versions Ghost versions 6.22.1 through 6.63.0 Description Ghost is a Node.js content management system. When using the default local storage adapter, the system fails to restrict the content type of uploaded files. This allows files uploaded by staff...

CVE-2026-58880: Concurrent Execution using Shared Resource with Improper Synchronization

In handleappvalresponse of btifrc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-78862: Undefined Security Weakness

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the UART serial interface on the printed circuit board PCB...

CVE-2026-55269: Improper Input Validation

In FilterCapturedPacket of snooplogger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Linux Distros Unpatched Vulnerability : CVE-2026-66020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-63267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice Calc can link a cell range to an external csv data source, and the link is saved in the document. Such a link was fetched while the document loaded,...

Cisco ASA OS Command Injection (CVE-2021-1476)

A vulnerability in the CLI of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system OS of an affected device. The vulnerability is due to...

CVE-2026-28641: Undefined Security Weakness

In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

PT-2026-104702

Name of the Vulnerable Software and Affected Versions apusys affected versions not specified Description A memory corruption issue exists due to a use after free, which occurs when a program continues to use a pointer after it has been freed. This can lead to local escalation of privilege if a...

CVE-2022-37705

सुझाया गया विवरण Amanda 3.5.1 में एक विशेषाधिकार वृद्धि दोष पाया गया जो backup उपयोक्ता को root विशेषाधिकारों तक ले जा सकता है। कमजोर घटक runtar SUID है, जो /usr/bin/tar को विशेष तर्कों के साथ चलाने के लिए केवल एक रैपर है जिन्हें हमलावर नियंत्रित कर सकता है। प्रोग्राम tar बाइनरी को दिए गए args की...

CVE-2017-14187_PoC_ARMv7

CVE-2017-14187 PoC FortiOS 5.6.0 से 5.6.2, 5.4.0 से 5.4.8, और 5.2 से नीचे के संस्करणों के लिए स्थानीय विशेषाधिकार वृद्धि का प्रूफ-ऑफ-कॉन्सेप्ट fnsysctl और USB द्वारा ट्रिगर इसलिए भौतिक पहुँच आवश्यक। यह PoC CVE-2017-14187 का शोषण करके स्थानीय रूट शेल उत्पन्न करता है। लेख-विवरण Korean English TL;DR...