2498 matches found
The vulnerability of the _ath10k_ce_free_pipe() and _ath10k_ce_free_pipe_64() functions in the drivers/net/wireless/ath/ath10k/ce.c driver file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a hacker to induce a service failure.
The vulnerability of the ath10kcefreepipe and ath10kcefreepipe64 functions in the drivers/net/wireless/ath/ath10k/ce.c driver of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system is related to resource management errors. Exploiting this vulnerability could...
CVE-2026-55979: Improper Access Control
An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enforce more restrictive security policies...
CVE-2026-18606
A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...
CVE-2026-18606 Razer RzUpdateService Named Pipe RzUpdateService.exe privileges management
A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...
CVE-2026-18606
A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...
EUVD-2026-52351
A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...
CVE-2026-18606
RCE-like local privilege escalation in Razer RzUpdateService 1.10.14.0 via Named Pipe Handler (RzUpdateService.exe). Manipulating lpThreadParameter is reported to cause improper privilege management; requires local access. Publicly available exploit noted; vendor contacted early. No remediation d...
CVE-2026-18606 Razer RzUpdateService Named Pipe RzUpdateService.exe privileges management
A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:\Program Files x86\Razer\RzUpdateEngineService\RzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument...
PT-2026-67433
A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affected by this vulnerability is an unknown functionality of the file C:Program Files x86RazerRzUpdateEngineServiceRzUpdateService.exe of the component Named Pipe Handler. Executing a manipulation of the argument lpThreadParamete...
CVE-2026-55578 Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection
Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, the terminal feature in Pheditor uses an incomplete character blocklist to sanitize user-supplied commands before passing them to shellexec. After the fix for GHSA-9643-6xjp-vx57 which...
CVE-2026-55578 Pheditor: Incomplete command sanitization in terminal feature allows RCE via pipe operator, backtick substitution, and newline injection
Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, the terminal feature in Pheditor uses an incomplete character blocklist to sanitize user-supplied commands before passing them to shellexec. After the fix for GHSA-9643-6xjp-vx57 which...
Linux Distros Unpatched Vulnerability : CVE-2026-66141
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled. CVE-2026-66141 Note that Nessus relies on the...
DEBIAN-CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
UBUNTU-CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-66141
Affected software : Exim before 4.99.5. Vulnerability : .forward privilege escalation due to mishandling of force_command for a pipe transport. Root cause : improper handling of force_command in a pipe transport within Exim, enabling a local attacker to escalate privileges. Impact : high severity...