Exploit for Use After Free in Linux Linux_Kernel

Samsung Root Kit — Offline Version Android App DF Chain Prefe...

EUVD-2026-102472

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

CVE-2026-96425: Incorrect Permission Assignment for Critical Resource

Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus...

VulnCheck KEV: CVE-2026-111357

Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026...

Wazuh check_remote_commands() Code Execution Root Privileges

The vulnerability of the checkremotecommands function on the security monitoring and threat detection platform Wazuh is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute...

Nginx UI Code Execution

The vulnerabilities in the api/config/add.go, api/config/modify.go, and mcp/config/configmodify.go scripts of the Nginx UI user interface are related to insufficient validation of input data. Exploiting these vulnerabilities allows an attacker who operates remotely to execute arbitrary code,...

PT-2026-116132

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description An authenticated attacker can elevate their privileges to perform operations with QSECOFR/Root authority on the system. Recommendations At the moment, there is no information about a newer version tha...

CVE-2026-102917: Improper Privilege Management

IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege. A bad actor could exploit this vulnerability to perform operations with QSECOFR/Root authority on the system...

CVE-2026-111448: Improper Handling of Case Sensitivity

Wheels 4.0.0 through 4.1.2 uses case-insensitive comparisons in path-containment checks on case-sensitive filesystems. Canonical-path checks for zip entries, package mappings, development assets/docs, guide images and image tags can accept paths through an existing symlink to a case-distinct...

PT-2026-115650

Name of the Vulnerable Software and Affected Versions lomiri-download-manager affected versions not specified Description An incorrect DBus policy in the lomiri-upload-manager component of lomiri-download-manager allows an arbitrary user to read arbitrary files with root privileges over DBus. DBu...

PT-2026-115651

Name of the Vulnerable Software and Affected Versions lomiri-download-manager affected versions not specified Description An incorrect DBus policy in lomiri-download-manager allows an arbitrary user to execute arbitrary commands with root privileges over DBus. DBus is a message bus system that...

Linux Distros Unpatched Vulnerability : CVE-2026-96425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus CVE-2026-96425 Note that Nessus relies on the...

PT-2026-115483

Name of the Vulnerable Software and Affected Versions cifs-utils affected versions not specified Description A flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System CIFS share using a user-controlled credentials file...

CVE-2026-96424: Incorrect Permission Assignment for Critical Resource

Incorrect DBus policy for lomiri-upload-manager part of lomiri-download-manager allows arbitrary user to read arbitrary file as root over DBus...

CVE-2026-111281

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

Exploit for CVE-2026-104715

CVE-2026-104715 cifs-utils credentials-file option injecti...

CVE-2026-111281 Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials

Jooan JA-A12 IP cameras with firmware 00920171107 and 05.02.31.105 contain a remote code execution vulnerability that allows unauthenticated attackers to run root commands via hard-coded credentials. Attackers send singleCMD=SetDiagMode to /goform/SingleHandlebyCommand with an attacker-chosen...

EUVD-2023-59906

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-111357

Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026...

CVE-2026-111357

Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege escalation to root, as exploited in the wild in October 2026...