CVE-2021-44852

CVE-2021-44852 Ein Problem wurde in BSRCIO64.sys von Biostar RACING GT Evo 2.1.1905.1700 entdeckt. Ein Prozess mit niedriger Integrität kann das Geräteobjekt des Treibers öffnen und IOCTLs ausgeben, um beliebige physische Speicheradressen zu lesen oder zu schreiben oder eine beliebige Adresse...

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP

Kernel-Arbitrary-Read-Vulnerability-Superfetch-EOP Vulnerabilità di lettura arbitraria del kernel + Superfetch EOP basata su reacher da https://starlabs.sg/blog/2022/06-trying-to-exploit-a-windows-kernel-arbitrary-read-vulnerability/ . L'exploit deve essere eseguito con bassa integrità...

CVE-2026-26717

CVE-2026-26717: Attacco di Timing HMAC in OpenFUN Richie LMS Autore: Elvin Latifli ID CVE: CVE-2026-26717 Gravità: Media CVSS 3.1: 4.8 — AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Prodotto interessato: OpenFUN Richie tutte le versioni precedenti al commit a1b5bbd Componente interessato:...

CVE-2022-22715

Blogpost: https://whereisk0shl.top/post/break-me-out-of-sandbox-in-old-pipe-cve-2022-22715-windows-dirty-pipe L'exploit deve essere eseguito da LOW INTEGRITY La pulizia non è completata. L'exploit corregge solo gli oggetti TOKEN sovrascritti ma non la struttura del pool VS. Questa parte è spiegat...

CVE-2026-50416-writeup-and-poc

CVE-2026-50416: Un QWORD di Troppo nell'Heap del Desktop Sulla build Insider di Windows 11 10.0.28020.2149, il mapping in modalità utente dell'heap del desktop Win32k esponeva un puntatore grezzo al pool della sessione kernel all'offset 0x100. La lettura in sé è quasi offensivamente piccola:...

CVE-2023-20598-PDFWKRNL

Un exploit Proof of Concept per il driver AMD Radeon PDFWKRNL.sys, concepito per poter funzionare da un processo a bassa integrità...

Fedora 44 : stb (2026-2a592f622a)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2a592f622a advisory. Patch stbsprintf: security fix for CVE-2026-79516 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

python313-aiosmtplib-5.1.3-1.1 on GA media (moderate)

python313-aiosmtplib-5.1.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11799-1 Rating: moderate Cross-References: CVE-2026-90467 CVSS scores: CVE-2026-90467 SUSE : 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N CVE-2026-90467 SUSE : 6.3...

Fedora 45 : ruby (2026-ab0c751524)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ab0c751524 advisory. This rpm updates included resolv gem to 0.7.2 to resolve CVE security issues. Tenable has extracted the preceding description block directly from th...

openSUSE 16 Security Update : libidn (openSUSE-SU-2026:21758-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21758-1 advisory. This update for libidn fixes the following issue: - CVE-2026-57053: out-of-bounds read in ToUnicode APIs bsc1268965. Tenable has extracted the preceding...

PT-2026-86963

SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist. An unauthenticated attacker could host a malicious page to bypass framing restrictions. If an authenticated victim visits the attacker's page and interacts with it, the attacker could trick the vict...

Fedora 45 : openvkl / rkcommon (2026-ca74beef5f)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ca74beef5f advisory. Update to the latest version to fix CVE-2026-21399 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note tha...

CVE-2026-71144

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Hyperion Financial...

Fedora 44 : libidn (2026-2291be7d88)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2291be7d88 advisory. Security fix for CVE-2026-57053. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

CVE-2026-66775 Multiple vulnerabilities in SAP Business AI Platform (Approuter)

SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default. An unauthenticated attacker could craft a malicious link and trick a victim into following it. Successful exploitation could allow the attacker to bind the victim's session to an...

PT-2026-70047

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter does not enforce cross-site request forgery CSRF protection on the authentication flow by default. CSRF is a type of attack that tricks a victim into submitting a maliciou...

Photon OS 5.0: Runc PHSA-2024-5.0-91-0375

An update of the runc package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0375. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-65922

Technical details for CVE-2026-65922 are not publicly provided in the supplied documents; monitor for updates.

CVE-2026-41853

A flaw was found in Spring MVC and WebFlux applications, components of the Spring Framework. This vulnerability allows a remote, unauthenticated attacker to perform Multipart request smuggling attacks. Such an attack can lead to a low integrity impact, potentially enabling the attacker to bypass...

CVE-2026-48805

A flaw was found in Twig, a template language for PHP. Deprecated internal wrappers in the src/Resources/core.php file do not correctly forward the sandbox state. This allows legacy function calls, such as twigarraysome, to bypass security restrictions imposed by the sandbox. An attacker could...