Microsoft Windows Search Component Information Disclosure Vulnerability

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

Windows Graphics Component Remote Code Execution Vulnerability

Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

Windows Imaging Component Information Disclosure Vulnerability

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally...

Windows Imaging Component Remote Code Execution Vulnerability

Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

DirectWrite Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

Microsoft Graphics Component Elevation of Privilege Vulnerability

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

Microsoft Windows Search Component Elevation of Privilege Vulnerability

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-53360-POC

CVE-2026-53360: KVM SEV-SNP PSC heap out-of-bounds Proof of concept for a heap out-of-bounds read and write in KVM's SEV-SNP Page State Change PSC handling. A malicious SEV-SNP guest makes the host kernel walk a PSC entry array off the end of its slab allocation. That leaks the layout of...

Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours

Threat actors are continuing to leverage artificial intelligence AI to streamline their operations, with one financially motivated hacking group employing an autonomous, multi-agent attack framework to carry out a large-scale credential harvesting campaign within six hours. Google Threat...

CVE-2026-27172

camel-consul ConsulRegistry Deserialization Vulnerability Reproducer CVE-2026-27172 This project demonstrates a Java deserialization vulnerability in Apache Camel's camel-consul component ConsulRegistry, tracked as CVE-2026-27172. It is the same class of issue as CVE-2024-22369 , CVE-2024-23114 a...

CVE-2026-86644

star7th showdoc up to 3.9.1 contains a cross-site scripting (XSS) vulnerability in the file web_src/public/editor.md/editormd.js , triggered through the API Page Save Endpoint . The flaw allows a remote, authenticated attacker to execute arbitrary script via manipulation of the editor component. ...

CVE-2026-86644 star7th showdoc API Page Save Endpoint editormd.js cross site scripting

A vulnerability was determined in star7th showdoc up to 3.9.1. This vulnerability affects unknown code of the file websrc/public/editor.md/editormd.js of the component API Page Save Endpoint. Executing a manipulation can lead to cross site scripting. The attack may be launched remotely. The explo...

CVE-2026-86644 star7th showdoc API Page Save Endpoint editormd.js cross site scripting

A vulnerability was determined in star7th showdoc up to 3.9.1. This vulnerability affects unknown code of the file websrc/public/editor.md/editormd.js of the component API Page Save Endpoint. Executing a manipulation can lead to cross site scripting. The attack may be launched remotely. The explo...

EUVD-2026-72760

A vulnerability was determined in star7th showdoc up to 3.9.1. This vulnerability affects unknown code of the file websrc/public/editor.md/editormd.js of the component API Page Save Endpoint. Executing a manipulation can lead to cross site scripting. The attack may be launched remotely. The explo...

CVE-2026-86644 star7th showdoc API Page Save Endpoint editormd.js cross site scripting

A vulnerability was determined in star7th showdoc up to 3.9.1. This vulnerability affects unknown code of the file websrc/public/editor.md/editormd.js of the component API Page Save Endpoint. Executing a manipulation can lead to cross site scripting. The attack may be launched remotely. The explo...

CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project

CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project The project documents the completion and analysis of the Fragnesia CVE-2026-46300 TryHackME lab, which demonstrates a Linux kernel page -cache corruption vulnerability capable of achieving local privilege escalation through modification of cached...