5571 matches found
CVE-2026-44065: Off-by-one Error
An off-by-two error in lpwrite in papd in Netatalk 2.0.0 through 4.4.2 allows an adjacent network attacker to modify limited data or cause a minor service disruption via crafted print data...
UFONet 2.0
UFONet abuses OSI Layer 7-HTTP to create/manage 'zombies' and to conduct different attacks using GET/POST, multi-threading, proxies, origin spoofing methods, cache evasion techniques, etc...
CVE-2026-39310 Trilium Notes: Authentication Bypass in Clipper API for Electron (Desktop) Builds
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Clipper API in Trilium Desktop v0.101.3 allows full authentication bypass when running in an Electron environment. When Trilium detects an...
CVE-2026-42834: Improper Link Resolution Before File Access
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-45584: Heap-based Buffer Overflow
Heap-based buffer overflow in Microsoft Defender allows an unauthorized attacker to execute code over a network...
Microsoft Defender 安全漏洞
Microsoft Defender is a threat protection software developed by the American company Microsoft. There is a security vulnerability in Microsoft Defender, which stems from a heap buffer overflow. Unauthorized attackers may execute code through the network as a result of this vulnerability...
CVE-2026-42822
Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network...
PT-2026-70612
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper input validation allows an unauthorized attacker to execute arbitrary code over a network, which can lead to a full system compromise. Recommendations At the...
Exploit for Heap-based Buffer Overflow in Microsoft
CVE-2026-41096 Overview CVE-2026-41096 is a critical secu...
Security Updates for Microsoft Windows Admin Center (May 2026)
The Microsoft Windows Admin Center installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. CVE-2026-35438 - Improper access...
CVE-2026-41613
Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-40406
Use after free in Windows TCP/IP allows an unauthorized attacker to disclose information over a network...
EUVD-2026-29684
Heap-based buffer overflow in Microsoft Windows DNS allows an unauthorized attacker to execute code over a network...
EUVD-2026-29681
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network...
EUVD-2026-29672
Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network...
EUVD-2026-29665
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network...
EUVD-2026-29629
Authentication bypass using an alternate path or channel in Windows TCP/IP allows an authorized attacker to bypass a security feature over a network...
EUVD-2026-29636
Missing authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network...