8717 matches found
CVE-2026-39486
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP Chill Download Monitor download-monitor allows Blind SQL Injection.This issue affects Download Monitor: from n/a through = 5.1.8...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013531)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013531 advisory. In the Linux kernel, the following vulnerability has been resolved: staging: rtl8192u: Fix use after free in ieee80211rx We cannot dereference the skb pointer after...
Microsoft Azure Monitor Agent Input Validation Error Vulnerability (CNVD-2026-18593)
Microsoft Azure Monitor Agent is a monitoring agent program from Microsoft USA. A security vulnerability exists in Microsoft Azure Monitor Agent. An attacker can exploit the vulnerability to elevate privileges...
Microsoft Azure Monitor Agent Code Issue Vulnerability (CNVD-2026-18594)
Microsoft Azure Monitor Agent is a monitoring agent program from Microsoft USA. A security vulnerability exists in Microsoft Azure Monitor Agent. An attacker can exploit the vulnerability to elevate privileges...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013004)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013004 advisory. In the Linux kernel, the following vulnerability has been resolved: tipc: Fix use-after-free in tipcmonreinitself. syzbot reported use-after-free of...
WordPress Download Monitor plugin <= 5.1.9 - Non-Arbitrary File Download vulnerability
Non-Arbitrary File Download vulnerability discovered by daroo in WordPress Plugin Download Monitor versions = 5.1.9...
📄 dcontrol 1.0.9 Remote Code Execution
dcontrol version 1.0.9 suffers from an unauthenticated remote code execution vulnerability via the /control-api/monitor/open endpoint. Exploit Title: dcontrol v1.0.9 - Unauthenticated Remote Code Execution RCE Date: 2026-04-18 Exploit Author: Chokri Hammedi Vendor Homepage:...
📄 dcontrol 1.0.9 Keyboard Injection Remote Code Execution
dcontrol version 1.0.9 is vulnerable to an unauthenticated remote code execution via keyboard input injection. The /control-api/monitor/sendkey and /control-api/monitor/sendtext endpoints allow an unauthenticated attacker to simulate keyboard input on the target system. By chaining these endpoint...
CVE-2025-70795
STProcessMonitor 11.11.4.0, part of the Safetica Application suite, allows an admin-privileged user to send crafted IOCTL requests to terminate processes that are protected through a third-party implementation. This is caused by insufficient caller validation in the driver's IOCTL handler, enabli...
[SECURITY] Fedora 44 Update: plasma-systemmonitor-6.6.4-1.fc44
An interface for monitoring system sensors, process information and other sys tem resources...
[SECURITY] Fedora 44 Update: kgamma-6.6.4-1.fc44
A monitor calibration tool...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses c3p0-0.11.2.jar and mchange-commons-java-0.3.2.jar which are vulnerable to CVE-2026-27830 and CVE-2026-27727.
Summary IBM Maximo Application Suite - Monitor Component uses c3p0-0.11.2.jar and mchange-commons-java-0.3.2.jar which are vulnerable to CVE-2026-27830 and CVE-2026-27727. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2026-27727 DESCRIPTION:...
The vulnerability of the data collection tool for Azure Monitor Agents, which are associated with virtual machines and physical servers, stems from deficiencies in the deserialization mechanism. This allows attackers to exploit their privileges.
The vulnerability of the data collection tool for Azure Monitor Agents, which are associated with virtual machines and physical servers, is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow attackers to enhance their privileges...
The vulnerability of the data collection tool for Azure Monitor Agents, which operates on virtual machines and physical servers, stems from insufficient validation of input data. This allows attackers to exploit this flaw to increase their privileges.
The vulnerability of the data collection tool for Azure Monitor Agents, which operates on virtual machines and physical servers, is related to insufficient validation of input data. Exploiting this vulnerability could allow attackers to increase their privileges...
PT-2026-33284
A Critical Remote Elevation of Privilege vulnerability CVE-2026-32179 affects MsQuic. Organizations should identify usage and monitor for updates. MsQuic ElevationOfPrivilege infosec https://t.co/NfNpj6XuC3...
CVE-2026-32192
Deserialization of untrusted data in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
CVE-2026-32168
Improper input validation in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit these vulnerabilities by having multiple Azure and Microsoft components fail to validate input adequately or process untrusted data insecurely, allowing an authorized attacker to increase privileges...
