CVE-2026-82364

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...

CVE-2026-82364 macrozheng mall Order Submission submit race condition

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...

CVE-2026-82364 macrozheng mall Order Submission submit race condition

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...

CVE-2026-82364

macrozheng mall versions up to 1.0.3 are affected by a race condition in the Order Submission component, specifically within the /order/submit file (function unspecified). The vulnerability is reachable over the network but requires low privileges and is characterized by high attack complexity , ...

EUVD-2026-68092

A security vulnerability has been detected in macrozheng mall up to 1.0.3. This impacts an unknown function of the file /order/submit of the component Order Submission. The manipulation leads to race condition. It is possible to initiate the attack remotely. The attack is considered to have high...

CVE-2025-62215

CVE-2025-62215 INTEGRATED EXPLOIT SUITE v4.5 1. Panoramica del Progetto Questo progetto è una suite di strumenti di exploit automatizzati mirati alle vulnerabilità di Race Condition e Double-Free del kernel Windows. Combina l'estrazione dinamica degli offset utilizzando il motore JS di WinDbg con...

kernel-exploit-dirtycow

Kernel Exploit — Dirty Cow CVE-2016-5195 Laboratorio di escalatione dei privilegi tramite la vulnerabilità Dirty Cow, realizzato come parte della specializzazione in cybersecurity di 4Geeks Academy. Descrizione Dirty Cow è una condizione di gara nel sottosistema di memoria del kernel Linux...

cve-2022-46395-qemu

CVE-2022-46395 Laboratorio QEMU r36p0 Questo repository contiene un laboratorio QEMU/no-Mali per riprodurre la condizione di trigger portabile di CVE-2022-46395 contro la linea di driver Arm Mali r36p0. Il laboratorio è destinato alla ricerca locale di vulnerabilità e ai test di regressione. Non...

CVE-2024-6387-analysis

CVE-2024-6387 Analisi della vulnerabilità di race condition del segnale in OpenSSH Panoramica della vulnerabilità CVE-2024-6387 è una vulnerabilità di race condition nella gestione dei segnali presente nelle versioni di OpenSSH dalla 8.5p1 alla 9.7p1, nota come "regreSSHion". Un attaccante può...

CVE-2025-32421---Race-Condition-Vulnerability---Next.js

CVE-2025-32421---Race-Condition-Vulnerability---Next.js Laboratorio PoC per CVE-2025-32421 – Simulazione di Race Condition Cache Poisoning in Next.js Laboratorio CVE-2025-32421 – Race Condition Cache Poisoning in Next.js Questo laboratorio riproduce il comportamento descritto nel CVE-2025-32421...

CVE-2025-27591-Meta-below-LPE

CVE-2025-27591 — Meta below: escalation locale dei privilegi tramite symlink Panoramica Campo| Dettagli ---|--- CVE| CVE-2025-27591 Software| Meta below monitor delle risorse di sistema Versioni interessate| 0.9.0 Vulnerabilità| Follow di symlink → sovrascrittura arbitraria di file come root...

PT-2026-83423

Name of the Vulnerable Software and Affected Versions macrozheng mall versions prior to 1.0.4 Description A race condition exists in the Order Submission component within the '/order/submit' endpoint. This issue allows a remote attacker to manipulate the system, although the attack is characteriz...

CVE-2026-55784

free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only by SUPI. Every request handled by...

CVE-2026-55784 free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only by SUPI. Every request handled by...

CVE-2026-55784

free5GC is an open-source 5G core network implementation. In versions 1.4.4 and earlier , the AUSF component stores per-subscriber authentication state in a global sync.Map keyed only by SUPI . Because each request unconditionally replaces the active context for that SUPI, an attacker with access...

EUVD-2026-68016

free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only by SUPI. Every request handled by...

CVE-2026-77063

multer is a middleware for handling multipart/form-data in Node.js. When an application uses an asynchronous fileFilter together with the fileSize limit, a race condition in multer's file stream handling can allow a file that exceeds the configured size limit to bypass the size-limit rejection. A...

CVE-2026-58616

Concurrent execution using shared resource with improper synchronization 'race condition' in Copilot Chat Microsoft Edge allows an authorized attacker to disclose information over a network...

CVE-2025-70341

CVE-2025-70341: Permissões Inseguras + Execução Arbitrária de Código no App-Auto-Patch Resumo O App-Auto-Patch v3.4.2 cria seu diretório de trabalho com permissões graváveis por qualquer usuário chmod 777, possibilitando uma condição de corrida TOCTOU time-of-check-time-of-use local. Um atacante...

CVE-2026-77063

multer , a Node.js middleware for handling multipart/form-data, contains a race condition in its file stream handling that is triggered when an application uses an asynchronous fileFilter together with the fileSize limit . An attacker can exploit this to cause a file that exceeds the configured s...