48 matches found
PPLFault
PPLFault By Gabriel Landau at Elastic Security. From PPLdump Is Dead. Long Live PPLdump! presented at Black Hat Asia 2023. PPLFault 2024-02 UPDATE: Microsoft patched PPLFault on 2024-02-13. Seethis thread for related discussion. Exploits a TOCTOU in Windows Code Integrity to achieve arbitrary cod...
September 8, 2026—KB5123099 (OS Build 14393.9512)
September 8, 2026—KB5123099 OS Build 14393.9512 Applies To Windows Server 2016, all editions Win 10 Ent LTSB 2016 Win 10 IoT Ent LTSB 2016 Important Free support for Windows 10 Enterprise 2016 LTSB and Windows Server 2016 will soon end. For information about the availability of Extended Security...
September 8, 2026—KB5122878 (OS Builds 19045.7725 and 19044.7725)
September 8, 2026—KB5122878 OS Builds 19045.7725 and 19044.7725 Applies To Windows 10 ESU Windows 10 Enterprise LTSC 2021 Windows 10 IoT Enterprise LTSC 2021 Important Free support for Windows 10 Enterprise LTSC 2021 will end soon. For information about the availability of an Extended Security...
Malicious code in timeweave (PyPI)
Source: amazon-inspector 6c6450b478521f96973a556306ed36a1430407373bb1331e051faec0266e1e0d The package presents itself as a timezone/IANA cache utility but ships a manifest-driven Windows code-execution channel. updater.py defines DEFAULTDBURL =...
PYSEC-2026-3433 yt-dlp: Arbitrary code execution via manifest downloads with aria2c
Summary If aria2c is used as an external downloader for a fragmented manifest format such as an HLS/DASH stream, yt-dlp passes insufficiently sanitized input to aria2c that allows an attacker to perform an arbitrary file write. On Windows platforms, this can lead to immediate arbitrary code...
CVE-2026-50574
yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format such as an HLS/DASH stream, yt-dlp passes insufficiently sanitized input to aria2c that allows an attacker to perform an arbitrary file write. On...
CVE-2026-50574 yt-dlp: Arbitrary code execution via manifest downloads with aria2c
yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format such as an HLS/DASH stream, yt-dlp passes insufficiently sanitized input to aria2c that allows an attacker to perform an arbitrary file write. On...
CVE-2026-50574
yt-dlp is a command-line audio/video downloader. Prior to 2026.06.09, if aria2c is used as an external downloader for a fragmented manifest format such as an HLS/DASH stream, yt-dlp passes insufficiently sanitized input to aria2c that allows an attacker to perform an arbitrary file write. On...
CVE-2026-47092
Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the COMSPEC environment variable. Attackers can set COMSPEC to an arbitrary binary path before claude-hud performs its version...
PT-2026-27306
sbt 1.12.7 is released, featuring a security fix for CVE-2026-32948, Source dependency feature via crafted VCS URL leading to arbitrary code execution on Windows...
CVE-2021-47881 dataSIMS Avionics ARINC 664-1 - Local Buffer Overflow
dataSIMS Avionics ARINC 664-1 version 4.5.3 contains a local buffer overflow vulnerability that allows attackers to overwrite memory by manipulating the milstd1553result.txt file. Attackers can craft a malicious file with carefully constructed payload and alignment sections to potentially execute...
CVE-2021-47881
dataSIMS Avionics ARINC 664-1 version 4.5.3 contains a local buffer overflow vulnerability that allows attackers to overwrite memory by manipulating the milstd1553result.txt file. Attackers can craft a malicious file with carefully constructed payload and alignment sections to potentially execute...
CVE-2021-47881
CVE-2021-47881 affects dataSIMS Avionics ARINC 664-1, version 4.5.3. A local buffer overflow can be triggered by manipulating the milstd1553result.txt file, with a crafted payload and alignment sections potentially allowing arbitrary code execution on Windows. The CVSS indicates high impact on av...
Exploit for Code Injection in Microsoft
Reverse Shell-able Exploit POCs Sharing the list of Windows e...
CVE-2025-53000 nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions of nbconvert up to and including 7.16.6 on Windows have a vulnerability in which converting a notebook containing SVG output to a PDF results in unauthorized code execution...
EUVD-2018-20788
Malware in sbrugna...
EUVD-2018-17007
Malware in sbrugna...
EUVD-2011-0148
Malware in sbrugna...