CVE-2026-17525

The ABB My Control System versions 26.4 and 26.5 are susceptible to an incomplete cleanup vulnerability (CWE-459). The root cause is an incorrect cleanup of temporary files following an XML conversion , which can lead to disk space exhaustion . This issue impacts the availability of the system. R...

CVE-2026-17525 My Control System 26.5 – Disk space exhaustion due to incorrect temporary file cleanup after XML conversion

Incomplete cleanup vulnerability in ABB My Control System. This issue affects My Control System: 26.4 and 26.5...

CVE-2025-66478-kinda-waf

kinda-waf Simple, temporary WAF protection tester targeting a specific payload sequence. Let's help websites stay safe until they are properly patched! Purpose Protect from CVE-2025-66478 by detecting and blocking requests containing specific payload signatures. This shouldn't break legitimate...

dinkleberry

Dinkleberry 🫐 Are you one of the 92,000+ people1 stuck with a D-Link NAS vulnerable to CVE-2024-3272, and no patch in sight? This tool uses the exploit itself to patch a vulnerable device. 1: See original disclosure in refs What it does Dinkleberry will execute a command to swap out the vulnerabl...

ghostlock-s26

GhostLock - Android wrapper indev.ghostlock.s26 One-click Android wrapper for polygraphene/ghostlock-s26: GhostLock CVE-2026-43499 ported to the whole Samsung Galaxy S26 series Android 16 / GKI 6.12. One APK, three kernel lines, runtime parameter matching - no per-build app variants. Use only on...

printix-CVE-2022-25090

CVE-2022-25090 Instead of printing your homework as a user, print your system security policies as SYSTEM for fun. Explore the docs » View Demo . Report Bug . Request Feature Table Of Contents About the Project Built With Getting Started Prerequisites Installation Usage Roadmap Contributing Licen...

CLEANSTART-2026-CK79983 Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1

Security vulnerability affects the strimzi-kafka-operator package. Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1...

Metalama allows local code execution through DLL planting in shared temporary directories

Summary Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories. On Linux and macOS the default cache location was the world-writable system temporary directory Path.GetTempPath, i.e. /tmp, and...

GHSA-M6WQ-39M7-9XPP Metalama allows local code execution through DLL planting in shared temporary directories

Summary Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemblies from predictable temporary directories. On Linux and macOS the default cache location was the world-writable system temporary directory Path.GetTempPath, i.e. /tmp, and...

Exploit for Write-what-where Condition in Linux Linux_Kernel

DirtyFrag Galaxy A57 5G Root temporário para o Samsung Galaxy...

CVE-2026-82715

An Insecure Temporary File vulnerability (CWE-377) exists in the Hitachi Disk Array Driver for AIX (versions 01-00 before 01-23-/A) and the Hitachi Disk Array Driver for Virtual I/O Server (versions 01-04 before 01-23-/A). This flaw could lead to High impacts on integrity and availability accordi...

EUVD-2026-100774

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A...

cve-2026-43499-aak-an00

CVE-2026-43499 · 荣耀 WIN RT AAK-AN00 临时 Root 研究笔记 （全是deepseek写的，我啥也不懂） （又折腾了几天，进展为零，放弃了） （目前可以获取root，但非常不稳定，root后会断网，拔线会重启） （此仓库所有结论都只适用于荣耀 WIN RT，CVE-2026-43499漏洞，6.6.118-android15-8-gf17133276a57-abogki518694926-4k内核，不要扩散结论到临时root上，临时root可以持续并相对稳定运行） 设备 Bootloader 永久锁死 （ro.oemunlock.supported...

PT-2026-113597

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Array Driver for AIX: from 01-00 before 01-23-/A; Hitachi Disk Array Driver for Virtual I/O Server: from 01-04 before 01-23-/A...

CVE-2026-110234

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...

CVE-2026-110234 Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...

CVE-2026-110234 Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...

CVE-2026-60004-PoC

CVE-2026-60004: Gitea Diffpatch API Remote Code Execution !WARNING This repository is intended exclusively for authorized security research and controlled laboratory testing. Do not run the proof of concept against systems you do not own or have explicit permission to assess. Overview...

CVE-2014-5284

CVE-2014-5284 Bash implementation of CVE-2014-5284 Exploit Title: ossec 2.8 Insecure Temporary File Creation Vulnerability Privilege Escalation Python is nice but doesn't work all the time Exploit Author: mbadanoiu Python Exploit Author: skynet-13 Vendor Homepage: www.ossec.net/ Software Link:...

cups: CUPS: Denial of Service via deleted temporary printer

A flaw was found in CUPS. An attacker with access to the local print service can cause a Denial of Service DoS by submitting a held print job targeted at a temporary printer that is subsequently deleted. Because the print scheduler fails to verify that the printer destination still exists before...