441 matches found
CVE-2022-2602-Kernel-Exploit
CVE-2022-2602-Kernel-Exploit Details https://blog.hacktivesecurity.com/index.php/2022/12/21/cve-2022-2602-dirtycred-file-exploitation-applied-on-an-iouring-uaf/ TL;DR The vulnerability is an Use-After-Free that impacts the registered file descriptor functionality in the iouring subsystem. It's...
CVE-2022-0847
CVE-2022-0847 The Dirty Pipe Vulnerability For educational purposes only root@kitploit: ┌──vagrant㉿kali- └─$ ls -al /etc/passwd -rw-r--r-- 1 root root 3124 Mar 8 08:47 /etc/passwd ┌──vagrant㉿kali- └─$ head -n 1 /etc/passwd root:x:0:0:root:/root:/usr/bin/zsh ┌──vagrant㉿kali- └─$ echo foo /etc/pass...
CVE-2026-100608
Flowise versions through 3.1.4 contain an authorization bypass in the BullMQ admin dashboard . When running in queue mode with the dashboard enabled (and not in cloud mode), the /admin/queues mount fails to perform role, permission, or workspace scoping checks because it only validates the JWT vi...
deepstream: PATCH_MULTI action bypasses Valve permission system allowing unauthorized record writes
Summary The RECORDACTION.PATCHMULTI action is not registered in the Valve permission system's RULESMAP src/services/permission/valve/rules-map.ts. When ConfigPermission.canPerformAction is called for a PATCHMULTI message, getRulesForMessage returns null because the action is missing from the map...
CVE-2026-75743
Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery CSRF vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to...
CVE-2026-75638
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...
CVE-2026-19480
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...
EUVD-2026-84793
Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery CSRF vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to...
CVE-2026-75743 Adobe Experience Manager Forms JEE | Cross-Site Request Forgery (CSRF) (CWE-352)
Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery CSRF vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to...
CVE-2026-75743
Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (CSRF) vulnerability (CWE-352). This flaw allows an attacker to bypass security measures and gain unauthorized write access , potentially leading to a limited disruption of availability. Successful exploitation require...
CVE-2026-75743 Adobe Experience Manager Forms JEE | Cross-Site Request Forgery (CSRF) (CWE-352)
Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery CSRF vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to...
EUVD-2026-84769
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue requires user...
EUVD-2026-84767
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...
CVE-2026-19480
The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20) that can lead to a Security feature bypass . An attacker could exploit this flaw to bypass security measures and gain unauthorized write access . Notably, exploitation of this issue does not re...
CVE-2026-19480 CAI Content Credentials | Improper Input Validation (CWE-20)
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...
CVE-2026-75638
The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20). This flaw could allow an attacker to bypass security features and obtain unauthorized write access . Successful exploitation requires user interaction , such as a victim visiting a maliciously...
EUVD-2026-84765
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...
CVE-2026-75638 CAI Content Credentials | Improper Input Validation (CWE-20)
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...
CVE-2026-76194
The CAI Content Credentials software is affected by an Improper Input Validation vulnerability (CWE-20) that could lead to a Security feature bypass . An attacker could exploit this to gain unauthorized limited write access by tricking a victim into visiting a maliciously crafted URL or interacti...
CVE-2026-75638: Improper Input Validation
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in...