234495 matches found
EUVD-2026-55023
The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to include a local file, allowing users with editor-level access and above to include and execute arbitrary local PHP files...
CVE-2026-13170
The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to include a local file, allowing users with editor-level access and above to include and execute arbitrary local PHP files...
CVE-2026-13170
The Eventin WordPress plugin is affected up to version 4.1.20. The root cause is improper validation of a template path in the speaker_template setting, which is used to include a local file. This allows users with editor-level access and above to include and execute arbitrary local PHP files, en...
CVE-2026-13170 Eventin < 4.1.20 - Editor+ Local File Inclusion via speaker_template Setting
The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to include a local file, allowing users with editor-level access and above to include and execute arbitrary local PHP files...
kernel: selinux: fix overlayfs mmap() and mprotect() access checks
A flaw was found in the Linux kernel's SELinux security module when handling overlayfs. The existing security model for overlayfs does not properly enforce access controls for mmap and mprotect operations. This oversight could allow a local attacker to bypass intended security policies, potential...
CVE-2026-19381
A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...
CVE-2026-19382
A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...
CVE-2026-19380
A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...
CVE-2026-19382
A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...
CVE-2026-19382
CVE-2026-19382 affects Almico Speedfan 4.52, specifically the KiSystemCall64 function in the speedfan.sys MSR Index Handler. The weakness can cause a memory leak when a manipulation is executed locally. The exploit is publicly available, and the vendor has not responded to disclosure. The connect...
CVE-2026-19382 Almico Speedfan MSR Index speedfan.sys KiSystemCall64 memory leak
A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...
EUVD-2026-54977
A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...
EUVD-2026-54956
A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSync/fs.readFileSync of the file index.ts of the component geminithinking. This manipulation of the argument sessionCommand/sessionPath causes path traversal. The attack requires...
EUVD-2026-54959
A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFileSync of the file src/index.ts of the component uploaddocument. Performing a manipulation of the argument File results in path traversal. Attacking...
EUVD-2026-54958
A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfyuploadimage. Such manipulation of the argument imagepath leads to path traversal. An attack has to be approached locally. The project...
CVE-2026-19381 Kingston FURY CTRL RGB Control Software Driver NTIOLib_KSFX.sys privileges management
A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...
CVE-2026-19381
Kingston FURY CTRL RGB Control Software 2.0.65.0 is affected by a privilege management flaw in NTIOLib_KSFX.sys (Driver component). The vulnerability allows a local attacker to misuse an unknown function in the driver, with impact to confidentiality, integrity, and availability described as high....
CVE-2026-19381
A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...
EUVD-2026-54976
A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...
EUVD-2026-54975
A vulnerability was identified in Mullvad wireguard.sys 0.10.1. The affected element is the function AdapterState of the component IOCTL Handler. Such manipulation leads to improper update of reference count. Local access is required to approach this attack. The exploit is publicly available and...