CVE-2026-87707

Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-99640

Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally...

CVE-2026-87707

A heap-based buffer overflow in the Windows Fax and Scan Service allows an authorized attacker to achieve local privilege escalation . The vulnerability has a high CVSS 3.1 base score of 7.8 . Official remediation is available through a Microsoft fix .

Windows Fax and Scan Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally...

CVE-2026-104585

Mobile Security Framework (MobSF) v4.5.2 is vulnerable to Command Injection within the /download_data/ and /api/v1/scan endpoints. The flaw specifically affects the Dynamic Analyzer ADB integration module . This vulnerability allows for the execution of arbitrary commands on the underlying system...

PT-2026-111967

reNgine up to v2.2.0 and current master branch commit de4199222cca5618f1255930ce78987e47d43a99 is vulnerable to OS Command Injection via the custom headers scan engine configuration field in web/reNgine/tasks.py fetch url and dir file fuzz functions...

CVE-2026-104585

Mobile Security Framework MobSF v4.5.2 is vulnerable to Command Injection in /downloaddata/, /api/v1/scan, Dynamic Analyzer ADB integration module...

Microsoft Windows: CVE-2026-87707: Windows Fax and Scan Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally...

PT-2026-112890

Name of the Vulnerable Software and Affected Versions Windows Fax and Scan Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Fax and Scan Service. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-base...

CVE-2026-87707: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally...

Mobile Security Framework security vulnerabilities

The Mobile Security Framework version 4.5.2 has a security vulnerability. This vulnerability stems from the /downloaddata/, /api/v1/scan, and Dynamic Analyzer ADB integration module, where command injection is possible, potentially allowing for the execution of arbitrary commands...

log4j-scan

log4j-scan Un escáner totalmente automatizado, preciso y exhaustivo para encontrar hosts vulnerables a log4j Características Soporte para listas de URLs. Fuzzing en más de 60 cabeceras HTTP de solicitud no solo 3-4 cabeceras como en herramientas anteriores. Fuzzing en parámetros de datos POST HTT...

psad

psad - Detección de intrusiones con registros de iptables Introducción El detector de ataques de escaneo de puertos psad es un demonio ligero del sistema escrito en Perl, diseñado para trabajar con el código de cortafuegos Linux iptables/ip6tables/firewalld para detectar tráfico sospechoso como...

naabu

Características • Instalación • Uso • Ejecutar naabu • Configuración • Integración con NMAP • Exclusión de CDN/WAF • Discord Naabu es una herramienta de escaneo de puertos escrita en Go que te permite enumerar puertos válidos para hosts de forma rápida y fiable. Es una herramienta realmente...

Malicious Package

Overview @s4yhiitestpoc/scan-https-d is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @s4yhiitestpoc/scan-https-d (npm)

Source: amazon-inspector 1a1dd63de3f5e380c573cd6bcf885c9d0c7a5c503959dfde1a6c8b963a6ddaea On npm install, postinstall.js collects installer host identity — os.hostname, os.userInfo.username, home directory, cwd, non-internal network interface addresses, DNS servers, and platform/arch/release — an...

flan

Flan Scan es un escáner de vulnerabilidades de red ligero. Con Flan Scan puedes encontrar fácilmente puertos abiertos en tu red, identificar servicios y sus versiones, y obtener una lista de CVE relevantes que afectan a tu red. Flan Scan es un envoltorio sobre Nmap y el script vulners que convier...

Malicious code in @s4yhiitestpoc/scan-https-d (npm)

Dependency-confusion proof-of-concept package. A postinstall script runs automatically on installation and sends host and user identifiers hostname, username, home directory, network interface addresses, platform details and npm configuration to collector.oob.s4yhii.com, with a secondary DNS look...

MAL-2026-17766 Malicious code in @s4yhiitestpoc/scan-https-d (npm)

Dependency-confusion proof-of-concept package. A postinstall script runs automatically on installation and sends host and user identifiers hostname, username, home directory, network interface addresses, platform details and npm configuration to collector.oob.s4yhii.com, with a secondary DNS look...

spring4shell-scan

spring4shell-scan Un escáner completamente automatizado, fiable y preciso para encontrar vulnerabilidades Spring4Shell y Spring Cloud RCE Características Soporte para listas de URLs. Fuzzing con más de 10 nuevos payloads de Spring4Shell las herramientas vistas anteriormente usan solo 1-2 variante...