Search Vulnerabilities

TOCTOU local privilege escalation vulnerability

A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an ...

A TOCTOU (Time-Of-Check to Time-Of-Use) in the graphics interface may allow an attacker to load registers repeatedly creating a race condition pote...

Gotenberg: DNS rebinding bypasses SSRF validation on Chromium URL conversion routes

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

FastGPT: DNS rebinding TOCTOU bypass in isInternalAddress allows SSRF on all protected endpoints

n8n-MCP: Authenticated SSRF in n8n-mcp webhook and API client paths

Apache CloudStack: Domain/account resources limits not honored

Akamai Guardicore Platform Agent (GPA) and Zero Trust Client on Linux and macOS allow TOCTOU-based local privilege escalation

The base directory (`spring

OpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS Bridge

OpenClaw < 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge Writes

OpenClaw < 2026.4.10 - DNS Rebinding SSRF via Hostname Validation Bypass

Sandboxie-Plus local privilege escalation via TOCTOU race condition in UpdUtil addon installation

chatchat-space Langchain-Chatchat OpenAI-Compatible File Upload API openai_routes.py files toctou

OpenClaw < 2026.4.10 - Time-of-Check-Time-of-Use (TOCTOU) Race Condition in exec Script Preflight Validator

PaperCut MF: Card truncation on HP readers

Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2

Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service

PrefectHQ prefect Webhook/Notification validate_restricted_url toctou