CVE-2024-0044

CVE-2024-0044/A-307532206 is a High severity vulnerability in the Android framework that allows attackers with adb access to run arbitrary code under the UID of arbitrary app. It was originally found by Tom Hebb from Meta Red Team X. You can found many articles on exploit this vulnerability on th...

CVE-2026-95518

Time-of-check time-of-use TOCTOU race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. This issue affects Pardus Package Installer: from 0.7.0 before 0.7.1...

EUVD-2026-125284

Time-of-check time-of-use TOCTOU race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. This issue affects Pardus Package Installer: from 0.7.0 before 0.7.1...

CVE-2026-95518

A Time-of-check time-of-use (TOCTOU) race condition vulnerability exists in the Pardus Package Installer developed by TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü. The flaw affects versions from 0.7.0 before 0.7.1 . Attackers can leverage this race condition to achieve high impact con...

CVE-2026-95518 TOCTOU Race Condition in TÜBİTAK BİLGEM's Pardus Package Installer

Time-of-check time-of-use TOCTOU race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. This issue affects Pardus Package Installer: from 0.7.0 before 0.7.1...

PT-2026-146830

Time-of-check time-of-use TOCTOU race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer allows Leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. This issue affects Pardus Package Installer: from 0.7.0 before 0.7.1...

App Package Installer Privilege Escalation

The vulnerability of the App Package Installer installation program for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

App Package Installer Privilege Escalation

The vulnerability of the App Package Installer installation program for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the Link.filename path handling in pip.internal.models.link and the download path joins in pip.internal.network.download and pip.internal.req.reqinstall. An attacker can place files at arbitrary locations on disk...

python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite

A flaw was found in pip, the package installer for Python. A remote attacker can exploit this vulnerability by tricking a victim into installing a malicious Python wheel. This wheel contains specially crafted entry-point names that use directory traversal or absolute paths. This allows pip to wri...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the ZipArchiver and GPM\Installer process. An attacker can exhaust disk spa...

PT-2026-60144

Name of the Vulnerable Software and Affected Versions Grav version 2.0.1 Description A decompression-bomb size-cap bypass exists in ZipArchiver and GPMInstaller. The system calculates the uncompressed size by summing the values declared in each entry's ZIP central-directory header via...

CVE-2026-50400

CVE-2026-50400 is a Windows App Installer elevation-of-privilege vulnerability caused by a stack-based buffer overflow. An attacker with local, low-privilege access could exploit this to gain higher privileges on the system. Public sources confirm a local-execution path via Windows App Installer ...

CVE-2026-50400 Windows App Package Installer Elevation of Privilege Vulnerability

...

CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability

...

CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability

...

CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability

...

PYSEC-2026-2876 pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere

pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run...

pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere

pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run...

RLSA-2026:36193 Important: python3.14-pip security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...