156244 matches found
kernel: net: qrtr: restrict socket creation to the initial network namespace
A flaw was found in the Linux kernel's QRTR Qualcomm IPC Router networking component. An unprivileged local attacker can create a QRTR socket in a separate network namespace. Due to improper handling of global state variables, this allows the attacker to send datagrams and control-plane messages ...
Exploit for CVE-2026-88789
CVE-2026-88789 — Camel Quarkus: forced Xalan TransformerFacto...
[SECURITY] [DLA 4808-1] network-manager-l2tp security update
Debian LTS Advisory DLA-4808-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson October 01, 2026 https://wiki.debian.org/LTS Package : network-manager-l2tp Version : 1.20.8-1+deb12u1 CVE ID : CVE-2026-19624 CVE-2026-75131 CVE-2026-75883 CVE-2026-93337 Andres...
BIT-DOTNET-SDK-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
BIT-DOTNET-2026-69439 .NET and Visual Studio Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
BIT-DOTNET-2026-69304 ASP.NET Core Denial of Service Vulnerability
Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CLEANSTART-2024-FI56584 Side-channel information leakage in Network Internals in Google Chrome prior to 89
Security vulnerability affects the chromium package. Side-channel information leakage in Network Internals in Google Chrome prior to 89...
CLEANSTART-2024-GW42841 Use after free in Network API in Google Chrome prior to 90
Security vulnerability affects the chromium package. Use after free in Network API in Google Chrome prior to 90...
CLEANSTART-2024-UG97969 Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90
Security vulnerability affects the chromium package. Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90...
CLEANSTART-2024-FS57610 Inappropriate implementation in Network in Google Chrome prior to 90
Security vulnerability affects the chromium package. Inappropriate implementation in Network in Google Chrome prior to 90...
CLEANSTART-2024-SH80955 Use after free in Network service in Google Chrome prior to 91
Security vulnerability affects the chromium package. Use after free in Network service in Google Chrome prior to 91...
CamTRON
CamTRON - Escáner de Cámaras Una herramienta automatizada para detectar dispositivos de vigilancia cámaras en redes. Características Detección multimarca : Compatible con más de 30 marcas de cámaras, incluyendo Hikvision, Dahua, Axis, CCTV y más Escaneo de alto rendimiento : Escaneo concurrente c...
Meari IoT Cloud Platform OpenAPI Service
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow attackers to manipulate device configurations, trigger unauthorized behaviors, and access sensitive information such as device credentials, owner details, and network data without proper authorization. 2. RECOMMENDED...
PT-2026-104013
Name of the Vulnerable Software and Affected Versions Teledyne FLIR Aware2 versions through 6.9.0.2 Description Unencrypted traffic in the 802.11 network allows adjacent unauthenticated attackers to intercept, hijack, or modify session traffic against Teledyne FLIR PackBot robots. This is achieve...
PT-2026-105561
Blind SSRF via unvalidated Link header URL in pagination allows internal network probing in oras.land/oras-go...
PT-2026-105846
Summary The OAuth 2.0 setup wizard's local callback HTTP server reflects the error query parameter directly into an HTML response without any sanitization or encoding. An attacker can craft a malicious callback URL containing JavaScript in the error parameter that executes in the victim's browser...
CVE-2026-9032: NULL Pointer Dereference
Tapo C120 v1 and C200 v5 contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without authentication after initial setup and does not validate that a password field is present for certain authentication and encryption parameter combinations...
PT-2026-105069
Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...