Lucene search
+L

13 matches found

Kitploit
Kitploit
•added 2026/09/29 5:21 p.m.•14 views

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation Hands‑on analysis of CVE‑2025‑62215, a Windows Kernel race condition exploited in the wild. Demonstrates privilege escalation to SYSTEM, detection scripts, and patch validation strategies for enterprise defenders and red...

7CVSS7.4AI score0.05985EPSS
SaveExploits6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/03 12:00 a.m.•1 views

CVE-2026-14611: Exposure of Resource to Wrong Sphere

A vulnerability has been found in DeepMyst Mysti up to 0.4.0. The affected element is the function initProjectMemory of the file src/managers/MemoryManager.ts of the component Per-Project Auto-Memory Handler. Such manipulation of the argument workspacePath leads to exposure of resource. The attac...

5.3CVSS5.1AI score0.0043EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/07/03 12:00 a.m.•35 views

PT-2026-55651

Name of the Vulnerable Software and Affected Versions DeepMyst Mysti versions prior to 0.4.0 Description Remote manipulation of the workspacePath argument within the initProjectMemory function, located in the src/managers/MemoryManager.ts file of the Per-Project Auto-Memory Handler component, can...

5.3CVSS5.9AI score0.0043EPSS
SaveExploits0References13
NVD
NVD
•added 2026/06/28 11:16 p.m.•27 views

CVE-2026-13511

A vulnerability was determined in VoltAgent up to 2.1.17. Affected by this issue is the function handleGetMemoryConversation of the file packages/server-core/src/handlers/memory.handlers.ts of the component Memory REST API. Executing a manipulation of the argument conversationId can lead to...

3.1CVSS0.00335EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/06/28 10:30 p.m.•17 views

CVE-2026-13511 VoltAgent Memory REST API memory.handlers.ts handleGetMemoryConversation improper authorization

A vulnerability was determined in VoltAgent up to 2.1.17. Affected by this issue is the function handleGetMemoryConversation of the file packages/server-core/src/handlers/memory.handlers.ts of the component Memory REST API. Executing a manipulation of the argument conversationId can lead to...

3.1CVSS5.2AI score0.00335EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/06/02 12:00 a.m.•82 views

PT-2026-45766

Bitdefender Napoca bare-metal hypervisor contains an out-of-bounds write vulnerability in the BIOS INT 0x15 / E820 memory map handler, implemented in napoca/guests/bios handlers.c. The handler computes a destination offset into the guest RealModeMemory buffer from guest-controlled ES and EDI...

8.5CVSS5.8AI score0.00118EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/05/15 12:00 a.m.•17 views

The vulnerability of the Kernel Memory Handler component in the MacOS operating system allows attackers to enhance their privileges.

The vulnerability of the Kernel Memory Handler component in the MacOS operating system is related to buffer overflows that occur without proper input data validation. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

9CVSS5.7AI score0.00717EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
•added 2019/05/02 6:45 a.m.•30 views

Arbitrary Code Execution

Firefox, Firefox ESR and Thunderbird are vulnerable to arbitrary code execution attacks. A remote unauthenticated attacker could exploit the vulnerable Memory Handler component to execute arbitrary code via various memory errors which may occur...

9.8CVSS9.8AI score0.02666EPSS
SaveExploits0References13Affected Software4
UbuntuCve
UbuntuCve
•added 2015/02/28 1:59 a.m.•44 views

CVE-2014-9676

The segwritepacket function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service "invalid memory handler" and possibly execute arbitrary code via a crafted video that triggers a use after free...

6.8CVSS7.5AI score0.03316EPSS
SaveExploits1References2
Prion
Prion
•added 2015/02/28 1:59 a.m.•29 views

Double free

The segwritepacket function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service "invalid memory handler" and possibly execute arbitrary code via a crafted video that triggers a use after free...

6.8CVSS7.9AI score0.03316EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2015/02/28 1:00 a.m.•47 views

CVE-2014-9676

The segwritepacket function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service "invalid memory handler" and possibly execute arbitrary code via a crafted video that triggers a use after free...

6.8CVSS8.8AI score0.03316EPSS
SaveExploits1
OSV
OSV
•added 2008/12/15 12:00 a.m.•53 views

DSA-1687-1 fai-kernels linux-2.6 user-mode-linux - several vulnerabilities

Bulletin has no description...

7.8CVSS5.8AI score0.0368EPSS
SaveExploits12
OSV
OSV
•added 2008/12/04 12:00 a.m.•53 views

DSA-1681-1 linux-2.6.24 - several vulnerabilities

Bulletin has no description...

10CVSS5.7AI score0.05362EPSS
SaveExploits6
Rows per page
Query Builder