EUVD-2026-79923

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

CVE-2026-87271

A vulnerability in the Core component of Oracle VM VirtualBox version 7.2.16 (Windows host only) allows a low-privileged local attacker to achieve takeover of the product. The CVSS 3.1 score is 7.8 (HIGH) , with low attack complexity, no user interaction required, and high impact on confidentiali...

CVE-2026-87270

Oracle VM VirtualBox version 7.2.16 (component: Core , Windows host only ) is affected by a local vulnerability that allows a low-privileged attacker with logon access to achieve full takeover of the VirtualBox environment. The attack requires local access, has low complexity, and no user interac...

EUVD-2026-79922

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

EUVD-2026-79920

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

CVE-2026-87268

Oracle VM VirtualBox (component: Core ), version 7.2.16 , is affected by a local vulnerability that allows a low-privileged attacker with logon access to fully compromise the host (Confidentiality, Integrity, and Availability impacts all rated High ). The attack vector is local with low complexit...

CVE-2026-87269

CVE-2026-87269 affects Oracle VM VirtualBox 7.2.16 (component: Core ), applying to Windows hosts only . An easily exploitable vulnerability allows a low-privileged local attacker with logon to the host to achieve full takeover of VirtualBox, impacting confidentiality, integrity, and availability ...

EUVD-2026-79921

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...

FakeNetBIOS

Nota para el autor: si desea que esto se extraiga de Github, lo entiendo y lo haré sin objeciones. Ya que ha proporcionado el código fuente, pensé que @mubix sería una buena manera de incorporar mejoras al paquete | | | Herramientas FakeNetBIOS | | | | Simulación de hosts NetBIOS tipo Windows | |...

Trawler

为持久化而疏浚Windows 这是什么？ Trawler 是一个 PowerShell 脚本，旨在帮助事件响应者在 Windows 主机上发现潜在的安全入侵指标，主要关注持久化机制，包括计划任务、服务、注册表修改、启动项、二进制文件修改等。 目前，trawler 可以检测 MITRE 和 Atomic Red Team 明确指出的绝大多数持久化技术，并且会定期添加更多检测。 主要特性 扫描 Windows 操作系统的多种持久化技术（如下所列） CSV 输出，包含 MITRE 技术及调查启动元数据...

PYSEC-2026-3970 PyTorch Lightning path traversal vulnerability

In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the LightningApp when running on a Windows host. The vulnerability occurs at the /api/v1/uploadfile/ endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to...

CVE-2021-21402

CVE-2021-21402 Lectura arbitraria de archivos en Jellyfin Descripción de la vulnerabilidad Jellyfin es un sistema de software de medios libre que se utiliza para controlar y gestionar medios y streaming. Es una alternativa a Emby y Plex, que proporciona contenido multimedia desde un servidor...

CVE-2026-9854

A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows host, granting themselves full control over the host machine...

CVE-2026-9854

A vulnerability in the SYS600 RBAC mechanism (by Hitachi Energy ) allows users with access to the engineering tools to elevate privileges to administrator level on the underlying Windows host , granting themselves full control over the machine. The CVSS 4.0 score is 8.5 (HIGH) , with a local atta...

CVE-2026-9854

A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows host, granting themselves full control over the host machine...

EUVD-2026-70319

A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to administrator level on the underlying Windows host, granting themselves full control over the host machine...

Mozilla Firefox ESR < 153.1

The version of Firefox ESR installed on the remote Windows host is prior to 153.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-77 advisory. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14,...

Mozilla Firefox ESR < 115.39

The version of Firefox ESR installed on the remote Windows host is prior to 115.39. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-75 advisory. - Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some ...

MAL-2026-12461 Malicious code in streak-daily-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea29201e3cd49e11201222e430bd1787a1b00abdc46fad18908d0033459ed2d7 [email protected]'s main entry index.mjs runs a top-level async IIFE that reconstructs identifiers, paths, and URLs from char-code arrays to...

Malicious code in streak-daily-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea29201e3cd49e11201222e430bd1787a1b00abdc46fad18908d0033459ed2d7 [email protected]'s main entry index.mjs runs a top-level async IIFE that reconstructs identifiers, paths, and URLs from char-code arrays to...