DEBIAN-CVE-2026-93375

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-93375

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-93375

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-93375

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-93375

CVE-2026-93375 is a High severity vulnerability in Google Chrome (Chromium) caused by incorrect reference resolution in the Tracing component . Affected versions are prior to 153.0.8010.52 , with the NVD description specifying Windows as the affected platform. A local attacker could potentially e...

EUVD-2026-82477

Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

hostresolver

==================================================================================== HostResolver Current version: 1.0.0 Send comments and bug reports to: [email protected] ==================================================================================== Contents: 1. Overview 2. Using...

Security Bulletin: Vulnerability in Spring Framework affects DB2 Dev Extension (CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846)

Summary Upgraded spring-webmvc to 6.2.19 to remediate CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, and CVE-2026-41846 Information Disclosure, DoS, Path Traversal, Open Redirect, XSS — highest CVSS Base Score 7.5 High — PVR0786341. Vulnerability Details CVEID:CVE-2026-41841...

EUVD-2026-81811

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix WARNING in restort syzbot reported a WARNON!res-dev in restort triggered via addrhandler during asynchronous address resolution: " WARNING: drivers/infiniband/core/restrack.c:138 at restort+0x1c4/0x230 CPU1:...

CVE-2018-1058

CVE-2018-1058 — PostgreSQL Search Path Demonstration This repository contains the final report and the reproducibility artifacts for: CVE-2018-1058: Privilege Escalation in PostgreSQL through Uncontrolled Search Path The goal is to demonstrate the search-path trust failure behind CVE-2018-1058...

Holistic-Deconstruction-of-CVE-2019-5736-

= doi.org/10.5281/zenodo.18304765 = orcid.org/0009-0007-7728-256X README.md 💀 CVE-2019-5736: runc Container Breakout Deconstruction Advanced Purple Teaming & Forensic Analysis of Host Root Escape 🛡️ Overview This repository contains a high-fidelity deconstruction and Proof-of-Concept PoC for...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

CVE-2025-32463

CVE-2025-32463 Exploit --- Prueba de Concepto PoC AVISO LEGAL: Este repositorio contiene una prueba de concepto destinada únicamente a fines educativos, investigación defensiva y pruebas de penetración autorizadas. NO utilice este código en sistemas que no sean de su propiedad o para los que no...

CVE-2026-26030-Microsoft-Semantic-Kernel-1.39.4-RCE

Microsoft Semantic Kernel BPassed to VectorStore query/filter B -- CInMemoryVectorStore evaluates filter expression unsafely C -- DUnsafe attribute resolution via class / base / subclasses D -- EAccess to init.globals containing os and builtins E -- FArbitrary code execution e.g. os.system F --...

github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution

A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink,...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

github.com/go-git/go-git/v5: go-git: Arbitrary file read/write via symbolic link resolution

A flaw was found in go-git, an extensible Git implementation library. Worktree operations, such as checkout, status, and add, resolve symbolic links within the working tree without proper boundary confinement. This allows a remote attacker to craft a malicious repository containing a symlink,...

threat-finder

OffSeq Threat Finder threat-finder 用于发现主机上 实际运行 的易受攻击软件——而非清单所声称的内容——并告知您哪些发现是 网络可达 的。它会将每个运行中的服务（以及使用 --scope all 时的每个已安装 OS 软件包）解析为精确的 Package-URL，并使用生态系统原生的版本规则与 OffSeq Radar 目录进行匹配，因此已向后移植/修复的构建不会被误报。 root@kitploit: Vulnerability summary highest risk first: openssh-server@1:8.9p1-3ubuntu0.6 —...

dscanner

dScanner 🔍 Herramienta automatizada de reconocimiento web para auditorías de seguridad Descripción dScanner consolida múltiples herramientas de reconocimiento en un solo comando para la fase inicial de pentesting web. Solo usar con sistemas autorizados!!!! 🚀 Instalación Dependencias requeridas:...

susvibes-jupyter-server-cve-2026-35397

SusVibes 基准测试任务：Jupyter Server 内容路径解析 本仓库包含一个完整的 SusVibes 风格基准测试任务，该任务基于 Jupyter Server 中一个真实的上游 Python 安全修复构建。 该任务旨在评估代理是否能够仅凭普通的 GitHub issue 风格提示重新实现被遮蔽的内容路径解析行为，而无需告知其原始上游变更修复了一个漏洞。功能测试检查普通的文件行为，而隐藏的安全测试则检查实现是否保留了根目录边界。 提交摘要 要求| 状态| 证据 ---|---|--- 真实 Python 安全修复| 完成|...