Search Vulnerabilities

Microsoft Edge for Android Remote Code Execution Vulnerability

DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions

NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use race condition

Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool

Time-of-check time-of-use (TOCTOU) race condition vulnerability in Samsung Open Source Escargot allows Leveraging Race Conditions

Hi.Events 1.9.0 - Promo Code Max-Usage Bypass via Asynchronous Job Race Condition

Lack of signature verification before execution of downloaded content

acl < 2.4.0 TOCTOU Symlink Traversal via getfacl/setfacl/chacl

antlr ANTLR4 Maven Plugin GrammarDependencies.java ObjectInputStream.readObject toctou

Budibase: Potential SSRF DNS rebinding bypass in outbound fetch validation

Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memory

Ghost: Server-side request forgery via DNS rebinding in external request handling

Pi: Race condition in auth.json writes could expose stored credentials

A flaw in Node

Weak polkit authentication check in qSnapper

pam_usb: TOCTOU race condition in pad directory creation allows symlink substitution

undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse

Abrt: toctou race condition in abrt-dbus setelement allows arbitrary file writes to dump directories

OpenClaw < 2026.5.27 - Node Pairing State Mutation via Reconnection

OpenClaw < 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlist