CVE-2026-90291

A flaw was found in the Linux kernel's module duplication handling module/dups. This use-after-free vulnerability arises from incorrect lifetime management of internal request objects. When multiple operations access these objects concurrently, an object can be prematurely freed while still being...

CVE-2026-90155

A flaw was found in ksmbd, a Linux kernel module that provides an in-kernel SMB server. This vulnerability occurs due to improper handling of file lock requests. When filelock objects are freed while still part of the Virtual File System VFS blocked-request graph, it can lead to a system crash,...

Windows MIDI Service Module Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-90060

A flaw was found in the Linux kernel's ALSA control module. A local user could create a write-only kcontrol element without a get callback. This could lead to a null pointer dereference in the LED layer, causing a system crash and resulting in a denial of service...

CVE-2026-90061

A flaw was found in the netfilter nftables component of the Linux kernel. When new elements are inserted into a set without providing override expressions, a double cloning of existing set expressions occurs. This can lead to a module reference count imbalance, potentially causing system...

K000163681: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2025-61662 A Use-After-Free vulnerability has been discovered in GRUB's gettext module. This flaw stems from a programming error where the gettext command remains registered in memory after its module is unloaded. An attacker can exploit this condition by invokin...

emby_ssrf

msfemby This tool will check a remote EMBY server to attempt to use an SSRF vulnerability to perform an http scan of the network internal to the EMBY server. This is based on the vulnerability CVE-2020-26948. Installation Clone the repo and put the rb files into the...

CVE-2025-32463_POC

Checking nsswitch.conf default values: passwd: files systemd After calling chroot, sudo trys to parse the config values at nsswitch.conf to run the command, which leads it to try to open libnsssystemd.so.2...

CVE-2026-108375: Improper Control of Generation of Code

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, FieldRepresentation.getfielddefault inserts schema-controlled string, UUID, bytes, and fixed field defaults in...

CVE-2026-83828: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83828: Windows MIDI Service Module Elevation of Privileges Vulnerability

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-104585

Mobile Security Framework MobSF v4.5.2 is vulnerable to Command Injection in /downloaddata/, /api/v1/scan, Dynamic Analyzer ADB integration module...

EUVD-2026-100603

Mobile Security Framework MobSF v4.5.2 is vulnerable to Command Injection in /downloaddata/, /api/v1/scan, Dynamic Analyzer ADB integration module...

CVE-2026-88079: NULL Pointer Dereference

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83751: Windows MIDI Service Module Elevation of Privileges Vulnerability

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-83751: Use After Free

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-104585

Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection within the /download_data/ and /api/v1/scan endpoints. The flaw specifically affects the Dynamic Analyzer ADB integration module . This vulnerability allows for the execution of arbitrary commands on the underlying system...

CVE-2026-104585

Mobile Security Framework MobSF v4.5.2 is vulnerable to Command Injection in /downloaddata/, /api/v1/scan, Dynamic Analyzer ADB integration module...

CVE-2026-104585: Improper Neutralization of Special Elements used in a Command

Mobile Security Framework MobSF v4.5.2 is vulnerable to Command Injection in /downloaddata/, /api/v1/scan, Dynamic Analyzer ADB integration module...