101412 matches found
CVE-2026-98164 KVM: x86/mmu: Check write tracking in all address spaces
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...
EUVD-2026-88753
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...
CVE-2026-98164 KVM: x86/mmu: Check write tracking in all address spaces
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-86950 Apple Multiple Products Out-of-Bounds Write Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses...
CVE-2026-85520
The gmfeed (Google Merchant Center Feed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write via the feed.php endpoint. The root cause is a lack of authentication and input validation, which allows an attacker to control the output filename, path, extension, and content th...
CVE-2026-85520 Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop module
Google Merchant Center Feed gmfeed module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated attacker can send a crafted request that controls the output file name, path, extension, and content through request parameters. Due to the...
CVE-2026-85520 Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop module
Google Merchant Center Feed gmfeed module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated attacker can send a crafted request that controls the output file name, path, extension, and content through request parameters. Due to the...
EUVD-2026-88735
Google Merchant Center Feed gmfeed module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated attacker can send a crafted request that controls the output file name, path, extension, and content through request parameters. Due to the...
CVE-2026-8066
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...
UBUNTU-CVE-2026-102474
A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, but the multi-byte token can need five or six bytes. A local user who can supply such an escape to dash printf or echo %b, including through dash -c and a positional argument, can write o...
CVE-2026-102474
A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, but the multi-byte token can need five or six bytes. A local user who can supply such an escape to dash printf or echo %b, including through dash -c and a positional argument, can write o...
CVE-2026-91012
A flaw was found in Apache Karaf. This vulnerability allows privilege escalation when the configuration service fails to properly restrict file paths to the designated configuration directory. An authenticated user with manager-level permissions can supply directory traversal sequences or absolut...
D-Link DIR-895L L2TP Host Name AVP OOB Write (CVE-2026-100740)
Out-of-bounds one-byte NUL write in the L2TP control parser on D-Link DIR-895L firmware A1102b07 when the Host Name AVP length is 127 peerhostname128. Requires L2TP WAN role / exposed UDP 1701. Set confirm=true to send the crafted SCCRQ trigger on authorized lab targets only. !/usr/bin/env python...
D-Link DIR-895L CVE-2026-100740 L2TP OOB Write Detection
Detects D-Link DIR-895L firmware A1102b07 and an exposed L2TP UDP/1701 service associated with CVE-2026-100740 Host Name AVP out-of-bounds write. !/usr/bin/env python3 -- coding: utf-8 -- """CVE-2026-100740 — D-Link DIR-895L L2TP Host Name AVP OOB write detection.""" from future import annotation...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
Copy Fail CVE-2026-31431 — Kubernetes Container Escape PoC...
CVE-2026-15390 Out-of-bounds write in Das U-Boot
Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...
CVE-2026-15390 Out-of-bounds write in Das U-Boot
Das U-Boot with CONFIGIPDEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit...
CVE-2026-15390
Das U-Boot is vulnerable to an out-of-bounds write when the CONFIG_IP_DEFRAG=y parameter is enabled. The root cause is a failure to clear the IP reassembly state after a complete datagram is delivered. An attacker capable of delivering fragmented IP traffic can achieve arbitrary code execution by...
EUVD-2026-88669
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...
CVE-2026-8066
A directory traversal vulnerability exists in the file upload functionality of the Hitachi Energy RTU500 . This flaw allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Successful exploitation may lead to the unauthorized modification of device data...