PT-2026-90462

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as named data. Both are added to tr-hist vars by save hist...

CVE-2026-89046

creationtimestamp| type| source ---|---|--- 2026-09-10 19:01:03+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv6qffx5pc2s...

CVE-2026-81046

creationtimestamp| type| source ---|---|--- 2026-09-10 17:28:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fgcb3jfvphwvh 2026-09-10 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6lcr6a442f 2026-09-10 18:08:02+00:00| seen|...

CVE-2026-80351

creationtimestamp| type| source ---|---|--- 2026-09-10 17:00:11+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6jndegk32p...

CVE-2026-9490

ID de CVE: CVE-2026-9490 Investigador: Vo Duc Thang ugvxb Reconocimiento: https://community.acer.com/en/kb/articles/19668 1. Resumen Ejecutivo Se ha identificado una vulnerabilidad de seguridad crítica en el servicio Acer Care Center ACCSvc.exe. La vulnerabilidad permite a cualquier usuario local...

CVE-2026-87911

creationtimestamp| type| source ---|---|--- 2026-09-09 21:01:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4gnlpu7723 2026-09-09 21:05:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fesvv2zo64rnp 2026-09-09 23:10:05+00:00| seen|...

CVE-2026-9789

CVE ID: CVE-2026-9789 Researcher: Vo Duc Thang ugvxb Acknowledgement: https://community.acer.com/en/kb/articles/19670 Video POC: https://drive.google.com/file/d/1B8b42bE68CWMnlqG6eJWi0txGFsHAJZc/view?usp=sharing 1. Executive Summary A critical local privilege escalation vulnerability has been...

CVE-2026-21085

creationtimestamp| type| source ---|---|--- 2026-09-09 08:11:50+00:00| seen| https://gist.github.com/ichintu/8de1b393c7903e975b41e200e6613355 2026-09-13 02:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvekss473z24...

CVE-2020-11492

CVE-2020-11492 Prueba de concepto PoC para la vulnerabilidad de escalada de privilegios de Docker Desktop para Windows. Esta vulnerabilidad fue parcheada en la versión 2.3.0.2 de Docker el 11 de mayo de 2020. Este PoC realiza lo siguiente: crea una tubería con nombre que imita la tubería con nomb...

CVE-2024-42049-PoC

CVE-2024-42049-PoC Detalles del CVE https://nvd.nist.gov/vuln/detail/CVE-2024-42049 TightVNC Servidor para Windows anterior a 2.8.84 permite a los atacantes conectarse a la tubería de control a través de una conexión de red. Detalles del PoC artículo:...

Windows-Kernel-Exploitation

1. Non-Paged Pool Overflow Exploitation with Named Pipes Techniques based on named pipes for pool overflow exploitation demonstrated on CVE-2020-17087 and an off-by-one overflow 2. Segment Heap VS Allocator Metadata Abuse Techniques for turning a potentially limited write primitive eg a pool...

cve-2018-5740

CVE-2018-5740 PoC Named, que recibe la respuesta de un servidor autoritativo legítimo, se bloquea por CVE-2018-5740. ARCHIVOS named.conf: archivo de configuración de BIND para el servidor autoritativo. example.com: archivo de zona para el servidor autoritativo. named-full-resolver.conf: archivo d...

CVE-2026-75746

creationtimestamp| type| source ---|---|--- 2026-09-08 22:11:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv224cxmdq2r 2026-09-09 12:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv3kncwxmp2g...

CVE-2026-69819

creationtimestamp| type| source ---|---|--- 2026-09-08 20:11:35+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztfqille2r 2026-09-08 20:19:54+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0353 2026-09-08 22:03:47+00:00| seen|...

CVE-2026-73309

creationtimestamp| type| source ---|---|--- 2026-09-08 16:07:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muzfquuajh2g 2026-09-09 01:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv2gcym2a22j 2026-09-12 09:07:07+00:00| seen|...

CVE-2026-8069

From an Acer Named Pipe to NT AUTHORITY\SYSTEM: CVE-2026-8069 Acer NitroSense and PredatorSense 3.x installed a Windows service called PSSvc that exposed a custom named-pipe protocol to local users. One protocol command accepted a caller-controlled executable path, duplicated the token of...

CVE-2026-77132

creationtimestamp| type| source ---|---|--- 2026-09-08 09:55:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ea6eeuqonpoxa 2026-09-08 13:30:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3muz4ydwo2x2u...

CrystalPotato

CrystalPotato Crystal port of GodPotato, a local privilege escalation from accounts with SeImpersonatePrivilege to SYSTEM. It works by abusing the DCOM OXID Resolver and named pipe impersonation. Windows APIs are resolved dynamically and invoked through indirect syscall stubs, all strings are...

CVE-2026-82312

OpenVPN 2.0.0 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects...

CVE-2026-82312

OpenVPN versions 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows are vulnerable to a denial of service caused by a NULL DACL on named IPC objects . Local authenticated users can exploit this to disrupt service. The CVSS 4.0 base score is 1.8 (LOW) , with a local attack vector requiri...