969514 matches found
EUVD-2026-52072
In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824...
EUVD-2026-52017
A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function ReportingRCBWriteAccessHandler of the file src/iec61850/server/mmsmapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not ...
EUVD-2026-52055
In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00489200; Issue ID: MSV-783...
EUVD-2026-52054
In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297...
CVE-2026-20482
In WLAN STA FW, a vulnerability arises where excessive logging can make the system unresponsive, enabling remote (proximal/adjacent) denial of service without requiring user interaction or additional privileges. The issue is identified with Patch ID: WCNCR00486814 and Issue ID: MSV-6824. The avai...
CVE-2026-20479
In the Modem component, CVE-2026-20479 describes a vulnerability where an out-of-bounds read occurs due to a missing bounds check. This could permit remote denial of service when a UE connects to a rogue base station controlled by an attacker; exploitation requires no user interaction. The issue ...
CVE-2026-20464
Summary: CVE-2026-20464 affects the hevc decoder. An out-of-bounds write caused by an integer overflow could allow remote escalation of privilege to System level without user interaction. The issue is tied to the patch ALPS11104718 and Issue MSV-8297. Details from sources: The vulnerability is de...
CVE-2026-18582
Summary: CVE-2026-18582 affects mz-automation libiec61850 up to 1.6.1, specifically the Reporting_RCBWriteAccessHandler in src/iec61850/server/mms_mapping/reporting.c of the Report Sending Path Handler. The vulnerability allows freeing memory not on the heap (memory disclosure/ corruption) and is...
CVE-2026-18582
A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function ReportingRCBWriteAccessHandler of the file src/iec61850/server/mmsmapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not ...
The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager lies in the lack of a mechanism for verifying input data during backup scenarios. This allows a malicious actor to execute arbitrary code with SYSTEM privileges.
The vulnerability of the software for calculating positions of individual RTLS transponders in the SIMATIC RTLS Locating Manager is related to deficiencies in the mechanism for verifying input data during backup scenario execution. Exploiting this vulnerability could allow an attacker, operating...
The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the Directum RX ECM system, related to deficiencies in access control, allows a perpetrator to compromise data integrity.
The vulnerability of the Directum RX ECM system is related to deficiencies in access control. Exploiting this vulnerability could allow a remote attacker to compromise data integrity...
totolink-exploit
Totolink N200RS+ / A3002RU RCE Exploit Command injection in c...
Exploit for CVE-2026-13714
CVE-2026-13714 Realtyna Organic IDX plugin + WPL Real Estate &...
CVE-2026-68579
FreeRDP before 3.30.0 = 3.29.0 contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStreamRead function client/Windows/wfcliprdr.c. When an OLE paste consumer e.g. explorer.exe calls IStream::Read with a fixed-size buffer of cb bytes, CliprdrStreamRead requests file...
CVE-2026-68580 FreeRDP before 3.29.0 Integer Overflow via Audio Input Channel
FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel audin across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing...
Malicious code in wacve-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 de96a68d25555c9ee1792a22b84307ba3bc68d1e012bd841454dc775986260cb The package contains encrypted code with infostealers targeting Linux and Android execution under Termux. The encrypted code collects files, browsers data, tex...