Microsoft PowerShell 7.4.x < 7.4.22 / 7.5.x < 7.5.13 / 7.6.x < 7.6.9 RCE (macOS)

The version of Microsoft PowerShell installed on the remote macOS host is 7.4.x prior to 7.4.22, 7.5.x prior to 7.5.13, or 7.6.x prior to 7.6.9. It is, therefore, affected by a remote code execution vulnerability. An out-of-bounds write in the Brotli decoder used by PowerShell 7 allows an...

pillow-uaf-research

Security Research Portfolio — Weaponized CVE-2026-112396 + Fil...

CVE-2026-119249

A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to obtain information about the host device...

CVE-2026-119250

A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop to execute arbitrary commands with root privileges on the host device...

CVE-2026-119251

A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device...

Exploit for CVE-2026-112621

CVE-2026-112621 LinkPresentation crash PoC - self-hoste...

EUVD-2026-113330

A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device...

CVE-2026-119251

A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device...

CVE-2026-119251

An Improper Access Control vulnerability exists in WiFiman Desktop for macOS . A malicious actor with local access and high privileges could exploit this flaw to escalate privileges on the host device. Exploitation details are not provided in the documents.

CVE-2026-119251

A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device...

CVE-2026-119250

A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop to execute arbitrary commands with root privileges on the host device...

CVE-2026-119250

A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop to execute arbitrary commands with root privileges on the host device...

CVE-2026-119250

A vulnerability in WiFiman Desktop for macOS allows a malicious actor with local access and low privileges to exploit an External Control of File Name or Path (CWE-73) flaw. Successful exploitation enables the execution of arbitrary commands with root privileges on the host device. No specific ve...

EUVD-2026-113328

A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop for macOS to execute arbitrary commands with root privileges on the host device...

CVE-2026-119249

A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to obtain information about the host device...

EUVD-2026-113327

A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop for macOS to obtain information about the host device...

CVE-2026-119249

A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop to obtain information about the host device...

CVE-2026-119249

A Binding to an Unrestricted IP Address vulnerability exists in WiFiman Desktop for macOS . A malicious actor with network access can exploit this flaw to obtain information about the host device. The vulnerability is associated with CWE-1327 . No specific remediation steps, affected versions, or...

CVE-2026-115805

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path...

CVE-2023-1409

If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms e.g. Linux, it is possible that client certificate validation may not be in effect, potentially allowing client to...