178140 matches found
HID Parser Library Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Out-of-bounds read in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...
Windows Bluetooth Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack...
Windows Hello Information Disclosure Vulnerability
Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally...
Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...
Windows Spaceport.sys Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
Windows Hyper-V Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
Windows Device Association Service Information Disclosure Vulnerability
Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network...
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...
Windows Message Queuing Queue Manager Information Disclosure Vulnerability
Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...
Remote Desktop Gateway Service Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network...
Windows Human Interface Device Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...
Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
CVE-2025-5777
CVE-2025-5777 — Citrix NetScaler "CitrixBleed 2" Memory Disclosure Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. The sequel to the original CitrixBleed: an out-of-bounds read on NetScaler ADC/Gateway authentication endpoints that...
CVE-2026-8451
🚨 CVE-2026-8451 - NetScaler SAML IdP Memory Overread Vulnerability A pre-authentication memory disclosure vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway configured as a SAML Identity Provider IdP. ✨ Overview CVE-2026-8451 is a High-Severity memory disclosure vulnerability caus...
CVE-2026-93347 Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_file
Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the getlistfile helper that allows malicious cluster workers to read arbitrary files via unvalidated filename values. Attackers holding the cluster key can send DistributedAPI requests with traversal filenames to read...
CVE-2026-93347
Wazuh versions 4.1.1 before 4.14.8 are vulnerable to a path traversal vulnerability in the get_list_file helper. This flaw occurs because the system fails to validate filename values, allowing malicious cluster workers to read arbitrary files. An attacker possessing the cluster key can send Distr...
CVE-2026-74034 Wazuh 4.1.0 before 4.14.8 Arbitrary File Read via upgrade_custom Command
Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wmagentupgrade that allows enrolled agents to issue upgradecustom commands with attacker-controlled filepath. Attackers can inject an upgradecustom message over the agent channel to read arbitrary files as root, exfiltrating...
CVE-2026-74034
Wazuh versions 4.1.0 before 4.14.8 are vulnerable to an arbitrary file read vulnerability due to a missing origin check in the wm_agent_upgrade component. This flaw allows enrolled agents to issue upgrade_custom commands using an attacker-controlled file_path . An attacker can inject an upgrade_c...