CVE-2026-86360

Dell System Update , versions prior to 2.3.0.0 , is vulnerable to a path traversal flaw that allows unauthenticated remote attackers to gain filesystem access . This critical vulnerability can be leveraged to execute arbitrary code with root privileges , potentially leading to a complete compromi...

CVE-2026-86360

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...

CVE-2026-71168

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

EUVD-2026-93774

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2026-71168

Dell System Update (DSU) versions prior to 2.3.0.0 are vulnerable to an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability. A low privileged attacker with local access could exploit this flaw to achieve Remote execution . The vulnerability is particularly r...

CVE-2026-71168

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2024-47076

Linux ve Unix sistemlerin, yazdırma sistemi olan CUPS Common UNIX Printing System, bu sistemlerde yazdırma yönetimi ve cihazlar arasında görevleri dağıtmak ile ilgili olan bir servis. Bu servis üzerinde CVE-2024-47076 olarak adlandırılan bir güvenlik açığı açıklandı. Linux ve Unix sistemlerinizin...

CVE-2026-80824

A flaw was found in the Linux kernel's USB subsystem usbfs. An unprivileged local attacker with read/write access to a /dev/bus/usb node could exploit a use-after-free vulnerability. This occurs because the usbdevice structure is prematurely freed before all pending operations are completed...

CVE-2026-90315

A flaw was found in the Linux kernel's PCI/sysfs legacy I/O and memory handlers. These handlers failed to enforce kernel lockdown, a security mechanism designed to prevent privileged users from performing certain low-level operations. A local root user could exploit this by writing to arbitrary I...

LovelySn0w

LovelySn0w. 一个 iOS CVE-2018-4150 应用程序示例。如果它在 XCode 中无法编译，请在 Twitter 上私信我。那可能是我的问题！目前尚未完成。如果你找到 //ACPV ›Some version ... 你是从 PS4 场景过来的，等着我完成 PS4 漏洞的研究工作，请阅读“致 PS4 场景”部分。 在 exploit.m 文件中，该应用将准备进行严肃测试。这意味着它会对文件系统执行某些操作，例如将 .tar 文件解压到特定文件夹。对于那些不明白我意思的人： 不，这不是一个 zip-app-free 的东西，它不会为你解压...

CVE-2026-105957

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

CVE-2016-5734-docker

CVE-2016-5734-docker PhpMyAdmin 4.0.x—4.6.2 远程代码执行漏洞（CVE-2016-5734） 搭建 git clone https://github.com/miko550/CVE-2016-5734-docker.git cd CVE-2016-5734-docker docker compose up hhtp://localhost:8083 利用 python3 cve-2016-5734.py -u root --pwd="root" http://localhost:8083 -c "system'ls -lua'" 参考...

Enumprotections_BOF

Enumprotections BOF 此 BOF 可用于枚举系统进程并识别每个进程的保护级别。还会返回其他信息，例如服务关联、用户、会话和路径。结合这些信息，可以识别出适合探索 SYSTEM 级 DLL 劫持的良好候选进程。理想进程应具备以下条件： 1. 未受保护 2. 与服务关联，因此可启动/停止 3. 第三方软件。微软非常擅长识别对 Microsoft 组件的劫持。 Usage Compilation 该工具在编写时未使用通常的 BOF API 声明（例如 bofdefs.h 文件）。正如 Matt Ehrnschwender 的这篇 博客文章 所述，可以使用 objcopy 将格...

CVE-2025-47176

CVE-2025-47176 PoC 浏览器桥 描述 此概念验证（PoC）演示了 CVE-2025-47176 漏洞模拟。它向 Outlook 注入一个包含恶意同步路径的构造邮件项，该路径会在扫描时触发一个操作。 重要提示： 此 PoC 模拟了有漏洞的 Outlook 路径解析，并在检测到恶意路径时触发系统重启 。 使用 malicious.prf 进行额外测试 你也可以通过导入构造的 Outlook 配置文件（malicious.prf）来测试此 PoC： 1. 将 malicious.prf 放置在与 PoC.py 相同的文件夹中。 2. 使用导入命令运行 Outlook： &...

CVE-2026-105862

The Payload headless content management system is vulnerable in versions before 3.90.0 and canary versions before 4.0.0-canary.34 . A collection allowing downloadable SVG uploads can store a malicious file that bypasses sanitization. When a user downloads and opens the SVG, it executes attacker-c...

EUVD-2026-93495

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, querying a readable collection with a relationship to another collection can expose information about related documents protected by access.read where...

CVE-2026-105851 Payload: Field access control bypass on auth collections

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, the duplicate operation copies values from a source document even when a field is hidden or its access.read or access.create rule rejects that val...

CVE-2026-105957 SourceCodester Performance Indicator System view_product.php sql injection

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...

CVE-2026-105957

A SQL injection vulnerability exists in the SourceCodester Performance Indicator System 1.0 . The flaw is located within an unknown function of the /opils/admin/view_product.php file. By manipulating the Category argument, an attacker can perform a remote SQL injection. The exploit for this vulne...

EUVD-2026-93487

A vulnerability was detected in SourceCodester Performance Indicator System 1.0. The affected element is an unknown function of the file /opils/admin/viewproduct.php. Performing a manipulation of the argument Category results in sql injection. Remote exploitation of the attack is possible. The...