CVE-2026-86740

Snipe-IT before 8.7.0 contains a flaw in UploadedFilesController::destroy() and Api\UploadedFilesController::destroy() where the return value of Storage::delete() is not checked. As a result, attachment deletion requests report success and files are hidden from listings, yet the physical files pe...

PoC-in-GitHub

PoC in GitHub 2026 CVE-2026-0009 2026-06-01 In multiple locations, there is a possible tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-57241

CVE-2024-57241CNNVD-2024-34500830 For web applications using DEDECMS 5.71SP1 and earlier, URL redirects occur because the source code logic error of the CMS does not judge the input GET request For web applications using DEDECMS 5.71SP1 and below, URL redirection occurs because the CMS source cod...

Guide-and-theoretical-code-for-CVE-2023-35674

Guide-and-theoretical-code-for-CVE-2023-35674 Guide and theoretical code for CVE-2023-35674 Because android is out of my skill league please use this as a high overview from my pov on how i would exploit this cve. the code snippets are just skeletons , please help : So first of all u can't exploi...

Blackash-CVE-2025-20343

🔒 CVE-2025-20343: Cisco ISE RADIUS Suppression DoS Vulnerability 🌐 ⚠️ Overview 🚨 High-severity denial-of-service DoS flaw in Cisco Identity Services Engine ISE! 💥 An unauthenticated remote attacker can crash the device with crafted RADIUS packets. 📅 Disclosed : November 5, 2025 ✅ No known...

EUVD-2026-74006

In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-49881

CVE-2026-49881 is a logic error in the serviceClassExists method of InCallController.java within Android, potentially allowing arbitrary code execution and local escalation of privilege . No additional execution privileges are required, and no user interaction is needed for exploitation. The vuln...

EUVD-2026-74001

In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-45525

CVE-2026-45525 affects Android , where a logic error in multiple locations causes improper data sanitization . This can lead to local information disclosure without requiring additional execution privileges, and no user interaction is needed for exploitation. The vulnerability is tracked in the A...

EUVD-2026-73995

In LimitRealloc of malloclimit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28668

CVE-2026-28668 is a use-after-free vulnerability in the LimitRealloc function of malloc_limit.cpp, caused by a logic error. The flaw allows a local privilege escalation with no additional execution privileges required and no user interaction needed for exploitation. The issue is associated with t...

CVE-2026-28664

CVE-2026-28664 affects Android , specifically the WriteImageToDisk function in runtime_image.cc . A logic error in this function permits file tampering, which can lead to local privilege escalation requiring only low privileges and no user interaction. The CNA-assigned CVSS 3.1 score is 7.8 (HIGH...

EUVD-2026-73993

In WriteImageToDisk of runtimeimage.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28660

CVE-2026-28660 affects Android , specifically the getAllSessions function in multiple files. The root cause is a confused deputy due to a logic error, which can lead to local information disclosure . No additional execution privileges are required, and no user interaction is needed for exploitati...

EUVD-2026-73990

In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28658

CVE-2026-28658 is a FRP (Fine-grained Runtime Permissions) bypass in Android's findMetaAuthUid function within AccountsDb.java . The root cause is a logic error in the code that allows a local privilege escalation without requiring additional execution privileges and without user interaction. The...

EUVD-2026-73989

In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28655

CVE-2026-28655 affects multiple functions in RemoteViews.java within Android, where a logic error permits a background activity launch bypass . The result is a local escalation of privilege requiring no additional execution privileges and no user interaction. The vulnerability is referenced in th...

EUVD-2026-73986

In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28650

A logic error in the setHiddenWhileSuspended method of WindowState.java in Android allows an overlay bypass , leading to local escalation of privilege with no additional execution privileges and no user interaction required. The vulnerability is rated High severity in Samsung's July 2026 Security...