CVE-2026-56982

In VPU, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56982

CVE-2026-56982 affects the VPU (Video Processing Unit) component on Android/Pixel devices, as referenced in the Android security bulletin dated 2026-09-01 (AOSP bug PUB-A-508716504 ). The root cause is a missing permission check , which enables a local privilege escalation requiring System execut...

CVE-2026-56970

In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78976

In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0192

In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79154

In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0192

CVE-2026-0192 is a local privilege escalation vulnerability in the Bootloader of supported Google Pixel devices, caused by a missing permission check . An attacker with System-level execution privileges can exploit it without user interaction to gain higher privileges, resulting in high impact on...

CVE-2026-0179

In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79149

In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0179

CVE-2026-0179 is a Critical -severity elevation-of-privilege vulnerability in the Bootloader of Google Pixel devices, caused by a missing permission check that allows a local attacker with System execution privileges to bypass permissions. No user interaction is required. The vulnerability is tra...

CVE-2023-26083

CVE-2023-26083 —— 通过时间线流泄漏 Mali GPU 内核地址 本仓库包含针对 CVE-2023-26083 的概念验证（PoC）漏洞利用代码。该漏洞位于 Mali GPU 驱动程序（Arm Mali GPU Kernel Driver）中，允许非特权用户通过时间线流（/dev/mali0）泄漏内核指针和敏感的内部信息。 漏洞概述 Mali GPU 驱动程序提供了一条“时间线流”（tlstream）功能，用于性能分析和调试。该流导出的事件包含原始内核指针（例如...

CVE-2026-54076

ArcadeDB is a Multi-Model DBMS. Prior to 26.6.1, the fix for CVE-2026-44221 added an UPDATESCHEMA authorization check only to LocalDocumentType.createProperty, while the remaining public schema mutators in engine/src/main/java/com/arcadedb/schema/LocalDocumentType.java and...

CVE-2024-10586

CVE-2024-10586 Debug Tool = 2.2 - 未认证的任意文件创建 描述： WordPress 的 Debug Tool 插件在 2.2 及之前的所有版本中，由于 dbtpullimage 函数缺少权限检查，并且缺少文件类型验证，因此容易受到任意文件创建漏洞的影响。这使得未认证的攻击者能够创建任意文件（例如 .php 文件），进而可能被利用来实现远程代码执行。 root@kitploit: CVE: CVE-2024-10586 CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Score: 9.8...

CVE-2024-4875

CVE-2024-4875 HT Mega – Absolute Addons For Elementor = 2.5.2 - 授权缺失导致选项更新 描述： HT Mega – Absolute Addons For Elementor WordPress 插件在版本 2.5.2 及以下版本中，由于 'ajaxdismiss' 函数缺少权限检查，导致数据可能被未经授权修改或丢失。这使得经过身份验证的攻击者（拥有订阅者级别及以上权限）能够更新诸如 userscanregister...

EUVD-2026-76858

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate watch permissions in the playListAddVideo.json.php endpoint when adding videos to playlists. Authenticated attackers can add password-protected videos they cannot watch to playlists they own by submitting the...

EUVD-2026-75963

The advanced-customized-prompts WordPress plugin through 1.0.1 does not perform any capability, ownership, or nonce check before updating WooCommerce order item metadata for a supplied order, allowing any authenticated user such as a subscriber to tamper with the custom metadata of orders belongi...

Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions

Summary The chat-completions endpoint reads a folder id out of the request body and saves the newly created chat into that folder without checking that the caller is allowed to write there. Any authenticated user who knows a folder's id can put a chat of their own into another user's folder,...

CVE-2026-19583

Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell artifact allows arbitrary command execution on endpoints, and so it requires the EXECVE permission to schedule. However, no such check was implemented for client monitoring...

EUVD-2026-75208

In RuoYi-Cloud-Plus = 2.6.2 in the ruoyi-workflow module, multiple core task APIs in FlwTaskController lack permission annotations, and the Service layer does not verify whether the current user is the task handler/related user. Authenticated low-privileged remote attackers can read sensitive...

CVE-2026-86764

Snipe-IT through 8.6.4 fixed in 8.7.0 does not enforce the components.view permission on the authenticated endpoint GET /api/v1/hardware//assigned/components. The endpoint authorizes only assets.view on the parent asset before returning linked component details; the components.view check is appli...