191 matches found
CVE-2026-97912
A flaw was found in the Linux kernel's Arm Ethos-U accelerator driver. When the mapping of Static Random-Access Memory SRAM fails during device initialization, the driver fails to reset the memory size to zero. Consequently, a local user can submit processing jobs that access physical address zer...
CVE-2026-13018
A flaw was found in chromium-browser. Due to insufficient validation of untrusted input in the video codecs component, a remote attacker could trigger an out-of-bounds memory access by convincing a user to process a specially crafted video file. Successful exploitation could lead to an applicatio...
PT-2026-96047
Name of the Vulnerable Software and Affected Versions BioStar BIOS Update Utility version 1.9.7.3 Description A write-what-where condition exists in the IOCTL Handler component within the sub 110BC function of the BSMEM64 W10.sys file. This issue occurs when the PhysicalAddress and Size arguments...
ASB-A-508703395
In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
open-webui Insecure Direct Object Reference (IDOR) vulnerability
An Insecure Direct Object Reference IDOR vulnerability exists in open-webui/open-webui version v0.3.8. The vulnerability occurs in the API endpoint http://0.0.0.0:3000/api/v1/memories/id/update, where the decentralization design is flawed, allowing attackers to edit other users' memories without...
Mercusys AC12G 信息泄露漏洞
The Mercusys AC12G is a Gigabit wireless router produced by the Chinese company Mercusys. There are security vulnerabilities in the Mercusys AC12G EU V1 and Mercusys AC12G EU V1 version released in September 2009. These vulnerabilities stem from the UPnP port 1900, where POST requests are receive...
CVE-2026-8070: Incorrect Permission Assignment for Critical Resource
Incorrect permission assignment for a critical resource in Armoury Crate allows a local user to bypass the driver’s validation mechanism, resulting in unauthorized read and write access to physical memory.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security...
CVE-2026-31244
The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint DELETE /memories/memoryid. The endpoint allows unauthenticated users to delete arbitrary memory records without verifying their identity or permissions. A remote attacker can exploit this by...
CVE-2026-43347
A flaw was found in the Linux kernel. An issue with the system's firmware incorrectly identifying a section of memory reserved for the Gunyah hypervisor as available for general use can lead to the kernel attempting to access this protected area. This unauthorized memory access can cause the syst...
CVE-2024-34635
Out-of-bounds read in parsing textbox object in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory...
CVE-2024-34632
Out-of-bounds read in uuid parsing in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory...
CVE-2024-34634
Out-of-bounds read in parsing connected object list in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory...
ASUS Motherboards 安全漏洞
ASUS Motherboards is a series of motherboards from the Chinese company Asus ASUS. A security vulnerability exists in ASUS Motherboards that stems from Physical access to the internal expansion slots for installation of specially crafted devices and software tools may result in uncontrolled resour...
EUVD-2004-1188
Malware in sbrugna...
EUVD-2021-13118
Malware in sbrugna...
EUVD-2021-24577
Malware in sbrugna...
EUVD-2021-26803
Malware in sbrugna...
EUVD-2003-0394
Malware in sbrugna...