CVE-2024-30090

CVE-2024-30090 - LPE PoC CVE-2024-30090 は Angelboy と DEVCORE によって発見されました。 Parent.cpp NtQuerySystemInformation medium-integrity を使用して ntoskrnl ベースを取得 - x64 としてコンパイル Child.cpp CVE-2024-30090 のエクスプロイト - x86 としてコンパイル 謝辞 多大な 感謝を Angelboy に、あなたの助けと指導に感謝します！ Cedric Halbronn 'OST2 - Exploitation 4011 -...

EUVD-2026-38064

urllib3 version 2.6.3 is vulnerable to a decompression bomb bypass in its streaming API preloadcontent=False when using Brotli support. The issue arises due to three independent code paths in response.py that bypass the maxlength protection introduced in version 2.6.0 to mitigate CVE-2025-66471...

EulerOS 2.0 SP11 : python-urllib3 (EulerOS-SA-2026-1619)

According to the versions of the python-urllib3 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the...

Important: resource-agents security update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Security Fixes: urllib3: urllib3: Unbounded decompression chain leads to resource...

EUVD-2024-45359

Malicious code in bioql PyPI...

EUVD-2024-2831

Malicious code in bioql PyPI...

CVE-2025-8435

The CVE-2025-8435 entry concerns Code-projects Online Movie Streaming 1.0. Affected component: /admin-control.php. Root cause: manipulation of the ID parameter leads to missing authorization, enabling remote exploitation. Exploitability is indicated as network-based with low attack complexity and...

CVE-2025-24995 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

...

CVE-2025-21375

CVE-2025-21375 is a local elevation-of-privilege in the Windows Kernel Streaming WOW Thunk Service Driver. The vulnerability is identified as a Privilege Escalation with CVSS v3.1 base score 7.8 (HIGH), requiring LOCAL access, LOW attack complexity, and no user interaction; the impact is high to ...

The vulnerability of clients to virtualization and streaming of Microsoft Application Virtualization (App-V) operating systems for Windows allows a perpetrator to execute arbitrary code.

The vulnerability of clients to virtualization and streaming of Microsoft Application Virtualization App-V operating systems on Windows systems is related to improper code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Adobe Flash Media Server Video Stream Capture Security Issue

Adobe Flash Media Server FMS is prone to a video streaming vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...