198 matches found
CVE-2026-28354 ClipBucket v5 has IDOR in Collection Item Management
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 59, collection item operations are vulnerable to authorization flaws, allowing a normal authenticated user to modify another user’s collection items. This affects both add item /actions/addtocollection.php due to missi...
PT-2026-22381
Name of the Vulnerable Software and Affected Versions Seerr versions prior to 3.1.0 Description Seerr, an open-source media request and discovery manager for Jellyfin, Plex, and Emby, contains a flaw where authenticated users can access and modify data belonging to other users. This is due to the...
CVE-2025-14963
A vulnerability identified in the HX Agent driver file fekern.sys allowed a threat actor with local user access the ability to gain elevated system privileges. Utilization of a Bring Your Own Vulnerable Driver BYOVD was leveraged to gain access to the critical Windows process memory lsass.exe Loc...
PT-2026-21777
Name of the Vulnerable Software and Affected Versions Trellix HX Agent affected versions not specified Description A security issue exists in the Trellix HX Agent driver file fekern.sys that could allow a local user to gain elevated system privileges. Exploitation involved leveraging a Bring Your...
Exploit for CVE-2026-0828
💀 0xKern3lCrush-M4te-CVE-2026-0828 Windows BYOVD Research &...
EUVD-2026-4851
Maker.js has Unsafe Property Copying in makerjs.extendObject...
CVE-2025-15516
The All-in-One Video Gallery plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxcallbackstoreusermeta function in versions 4.1.0 to 4.6.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, ...
Exploit for CVE-2025-36911
This is not an exploit for CVE-20...
Exploit for CVE-2025-55182
CVE-2025-55182: React Server Components RCE A minimal proof o...
EUVD-2025-150405
The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to privilege escalation. This is due to the plugin not properly validating a user's identity prior to allowing them to modify their own role via the REST API. The permission check in the...
Exploit for CVE-2025-62506
CVE-2025-62506 Vulnerability Verification Script !中文https...
MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS
Summary A privilege escalation vulnerability allows service accounts and STS Security Token Service accounts with restricted session policies to bypass their inline policy restrictions when performing "own" account operations, specifically when creating new service accounts for the same user...
EUVD-1999-1526
Malware in sbrugna...
EUVD-2018-13848
Malware in sbrugna...
EUVD-2010-1390
Malware in sbrugna...
CVE-2023-53540 wifi: cfg80211: reject auth/assoc to AP with our address
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: reject auth/assoc to AP with our address If the AP uses our own address as its MLD address or BSSID, then clearly something's wrong. Reject such connections so we don't try and fail later...
EUVD-2024-43479
Malicious code in bioql PyPI...
EUVD-2022-15239
Malicious code in bioql PyPI...