CVE-2025-15313: Improper Link Resolution Before File Access

Tanium addressed an arbitrary file deletion vulnerability in Tanium EUSS...

jsonpath 1.1.1 Prototype Pollution Scanner

jsonpath version 1.1.1 prototype pollution scanner that checks if a system is vulnerable to CVE-2025-61140 without any actual exploitation...

CVE-2024-36311: Time-of-check Time-of-use (TOCTOU) Race Condition

A Time-of-check time-of-use TOCTOU race condition in the SMM communications buffer could allow a privileged attacker to bypass input validation and perform an out of bounds read or write, potentially resulting in loss of confidentiality, integrity, or availability...

CVE-2025-48509: Improper Initialization

Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory integrity...

CVE-2026-21347: Integer Overflow or Wraparound

Bridge versions 15.1.3, 16.0.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-21537: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Microsoft Defender for Linux allows an unauthorized attacker to execute code over an adjacent network...

CVE-2025-7636: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ergosis Security Systems Computer Industry and Trade Inc. ZEUS PDKS allows SQL Injection. This issue affects ZEUS PDKS: from 1.0.5.10 through 10022026. NOTE: The vendor was contacted early about th...

Exploit for CVE-2025-8671

CVE-2025-8671-vulnerability-POC- CVE-2025-8671 vulnerability P...

CVE-2026-25813: Insertion of Sensitive Information into Log File

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The application logs highly sensitive data directly to console output without masking or redaction...

📄 Samsung QuramDNG Type Confusion Detector Vulnerability Scanner

This C++ scanner analyzes DNG Digital Negative files for the CVE-2025-58478 type confusion vulnerability in the libimagecodec.quram.so library used on Samsung devices...

CVE-2025-10463: Improper Authentication

Improper Authentication vulnerability in Birtech Information Technologies Industry and Trade Ltd. Co. Senseway allows Authentication Abuse. This issue affects Senseway: through 09022026. NOTE: Because the product was developed using outdated technology, the manufacturer is unable to fix the...

📄 Samsung QuramDng Warp Out-Of-Bounds Read

This python proof of concept demonstrates an out-of-bounds read vulnerability in Samsung's QuramDng image processing library, triggered via a specially crafted DNG Digital Negative file. The script programmatically builds a minimal but valid DNG file containing a malformed WarpRectilinear opcode,...

CVE-2025-15319: Improper Link Resolution Before File Access

Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools...

CVE-2025-15318: Improper Link Resolution Before File Access

Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools...

CVE-2025-15317: Allocation of Resources Without Limits or Throttling

Tanium addressed an uncontrolled resource consumption vulnerability in Tanium Server...

CVE-2025-15316: Improper Neutralization of Argument Delimiters in a Command

Tanium addressed a local privilege escalation vulnerability in Tanium Server...

CVE-2026-24027: Undefined Security Weakness

Crafted zones can lead to increased incoming network traffic...

CVE-2026-0398: Allocation of Resources Without Limits or Throttling

Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor...

CVE-2025-59024: Undefined Security Weakness

Crafted delegations or IP fragments can poison cached delegations in Recursor...

CVE-2026-22906: Use of Hard-coded Cryptographic Key

User credentials are stored using AES‑ECB encryption with a hardcoded key. An unauthenticated remote attacker obtaining the configuration file can decrypt and recover plaintext usernames and passwords, especially when combined with the authentication bypass...