PT-2026-90462

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as named data. Both are added to tr-hist vars by save hist...

CVE-2026-89046

creationtimestamp| type| source ---|---|--- 2026-09-10 19:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6qffx5pc2s...

CVE-2026-81046

creationtimestamp| type| source ---|---|--- 2026-09-10 17:28:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fgcb3jfvphwvh 2026-09-10 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6lcr6a442f 2026-09-10 18:08:02+00:00| seen|...

CVE-2026-80351

creationtimestamp| type| source ---|---|--- 2026-09-10 17:00:11+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6jndegk32p...

CVE-2026-9490

CVE ID: CVE-2026-9490 Researcher: Vo Duc Thang ugvxb Acknowledgement: https://community.acer.com/en/kb/articles/19668 1. Executive Summary A critical security vulnerability has been identified in the Acer Care Center service ACCSvc.exe. The vulnerability allows any authenticated local user to...

CVE-2026-87911

creationtimestamp| type| source ---|---|--- 2026-09-09 21:01:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4gnlpu7723 2026-09-09 21:05:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fesvv2zo64rnp 2026-09-09 23:10:05+00:00| seen|...

CVE-2026-9789

CVE ID: CVE-2026-9789 Researcher: Vo Duc Thang ugvxb Acknowledgement: https://community.acer.com/en/kb/articles/19670 Video POC: https://drive.google.com/file/d/1B8b42bE68CWMnlqG6eJWi0txGFsHAJZc/view?usp=sharing 1. Executive Summary A critical local privilege escalation vulnerability has been...

CVE-2026-21085

creationtimestamp| type| source ---|---|--- 2026-09-09 08:11:50+00:00| seen| https://gist.github.com/ichintu/8de1b393c7903e975b41e200e6613355 2026-09-13 02:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvekss473z24...

CVE-2020-11492

CVE-2020-11492 Proof-of-Concept PoC for Docker Desktop for Windows privilege escalation vulnerability. This vulnerability was patched in Docker version 2.3.0.2 on May 11th, 2020. This PoC performs the following: creates a named pipe mimicking docker named pipe \.\pipe\dockerLifecycleServer, call...

CVE-2024-42049-PoC

CVE-2024-42049-PoC CVE Details https://nvd.nist.gov/vuln/detail/CVE-2024-42049 TightVNC Server for Windows before 2.8.84 allows attackers to connect to the control pipe via a network connection. PoC Details article: https://izvd.eu/research/exploiting-cve-2024-42049 tested on: 2.7.10, 2.8.81; mos...

Windows-Kernel-Exploitation

1. Non-Paged Pool Overflow Exploitation with Named Pipes Techniques based on named pipes for pool overflow exploitation demonstrated on CVE-2020-17087 and an off-by-one overflow 2. Segment Heap VS Allocator Metadata Abuse Techniques for turning a potentially limited write primitive eg a pool...

cve-2018-5740

CVE-2018-5740 PoC Named, which is received response from legimate authoritative server, is crashed by CVE-2018-5740. FILES named.conf: BIND configration file for authoritative server. example.com: zone file for authoritative server. named-full-resolver.conf: BIND configration file for victim...

CVE-2026-75746

creationtimestamp| type| source ---|---|--- 2026-09-08 22:11:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv224cxmdq2r 2026-09-09 12:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv3kncwxmp2g...

CVE-2026-69819

creationtimestamp| type| source ---|---|--- 2026-09-08 20:11:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztfqille2r 2026-09-08 20:19:54+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:03:47+00:00| seen|...

CVE-2026-73309

creationtimestamp| type| source ---|---|--- 2026-09-08 16:07:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzfquuajh2g 2026-09-09 01:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv2gcym2a22j 2026-09-12 09:07:07+00:00| seen|...

CVE-2026-8069

From an Acer Named Pipe to NT AUTHORITY\SYSTEM: CVE-2026-8069 Acer NitroSense and PredatorSense 3.x installed a Windows service called PSSvc that exposed a custom named-pipe protocol to local users. One protocol command accepted a caller-controlled executable path, duplicated the token of...

CVE-2026-77132

creationtimestamp| type| source ---|---|--- 2026-09-08 09:55:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ea6eeuqonpoxa 2026-09-08 13:30:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz4ydwo2x2u...

CrystalPotato

CrystalPotato Crystal port of GodPotato, a local privilege escalation from accounts with SeImpersonatePrivilege to SYSTEM. It works by abusing the DCOM OXID Resolver and named pipe impersonation. Windows APIs are resolved dynamically and invoked through indirect syscall stubs, all strings are...

CVE-2026-82312

OpenVPN 2.0.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects...

CVE-2026-82312

OpenVPN versions 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows are vulnerable to a denial of service caused by a NULL DACL on named IPC objects . Local authenticated users can exploit this to disrupt service. The CVSS 4.0 base score is 1.8 (LOW) , with a local attack vector requiri...