collateral-damage

Collateral Damage Collateral Damage is a kernel exploit for Xbox SystemOS using CVE-2024-30088. It targets Xbox One and Xbox Series consoles running kernel versions 25398.4478, 25398.4908, and 25398.4909. The initial entrypoint is via the Game Script UWP application. The first stage payloads, PE...

Malicious code in test-hwp-uwp (PyPI)

--- Credit: OpenSSF source...

EUVD-2026-37860

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.63 via the 'userid' parameter due to missing validation on a user controlled key...

CVE-2026-4979 UsersWP <= 1.2.58 - Authenticated (Subscriber+) Server-Side Request Forgery via 'uwp_crop' Parameter

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to blind Server-Side Request Forgery in all versions up to, and including, 1.2.58. This is due to insufficient URL origin validation in the processimagecrop...

CVE-2026-4979

CVE-2026-4979 affects the UsersWP plugin for WordPress (

EUVD-2021-19778

Malware in sbrugna...

EUVD-2020-29611

Malware in sbrugna...

EUVD-2025-4926

Malicious code in bioql PyPI...

CVE-2025-9344

CVE-2025-9344 affects the WordPress plugin UsersWP (Front-end login, User Registration, User Profile & Members Directory) up to version 1.2.42. The issue is a Stored Cross-Site Scripting (XSS) vulnerability via uwp_profile and uwp_profile_header shortcodes caused by insufficient input sanitizatio...

CVE-2024-47006: Uncontrolled Search Path Element

Uncontrolled search path for the IntelR RealSense D400 Series Universal Windows Platform UWP Driver for WindowsR 10 all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-6696

Name of the Vulnerable Software and Affected Versions IntelR RealSense D400 Series Universal Windows Platform UWP Driver for WindowsR 10 all versions Description The issue is related to an uncontrolled search path in the IntelR RealSense D400 Series UWP Driver, which may allow an authenticated us...

MAL-2024-11720 Malicious code in test-hwp-uwp (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in test-hwp-uwp (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-28962

Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-28962

Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-28962: Externally Controlled Reference to a Resource in Another Sphere

Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service...

November 2, 2017—KB4049370 (OS Build 15063.675)

November 2, 2017—KB4049370 OS Build 15063.675 Applies To Windows 10, version 1703, all editions Improvements and fixes This release is intended for Microsoft Surface Laptop audiences only. This update includes quality improvements. No new operating system features are being introduced in this...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

Collateral Damage Collateral Damage is a kernel exploit for Xb...

CVE-2024-6265

The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WordPress plugin for WordPress is vulnerable to time-based SQL Injection via the ‘uwpsortby’ parameter in all versions up to, and including, 1.2.10 due to insufficient escaping on the user supplied...

January 10, 2023—KB5022303 (OS Build 22621.1105)

January 10, 2023—KB5022303 OS Build 22621.1105 Applies To Windows 11 version 22H2, all editions Important For Windows Recovery Environment WinRE devices, see the updated 1/20/23 Special instructions for Windows Recovery Environment WinRE devices in the How to get this update section to address...