2026-10 .NET 10.0.13 Security Update for ARM64 Client (KB5130036)

2026-10 .NET 10.0.13 Security Update for ARM64 Client KB5130036...

2026-10 .NET 9.0.21 Security Update for x86 Client (KB5130035)

2026-10 .NET 9.0.21 Security Update for x86 Client KB5130035...

2026-10 .NET 9.0.21 Security Update for x64 Client (KB5130035)

2026-10 .NET 9.0.21 Security Update for x64 Client KB5130035...

2026-10 .NET 9.0.21 Security Update for ARM64 Client (KB5130035)

2026-10 .NET 9.0.21 Security Update for ARM64 Client KB5130035...

2026-10 .NET 10.0.13 Security Update for x64 Client (KB5130036)

2026-10 .NET 10.0.13 Security Update for x64 Client KB5130036...

2026-10 .NET 10.0.13 Security Update for x86 Client (KB5130036)

2026-10 .NET 10.0.13 Security Update for x86 Client KB5130036...

2026-10 .NET 8.0.32 Security Update for x64 Client (KB5130034)

2026-10 .NET 8.0.32 Security Update for x64 Client KB5130034...

CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

CVE-2026-88833

A flaw in the BusyBox udhcpc DHCP client allows an attacker on the same network segment to cause a denial of service and loss of network connectivity. The vulnerability occurs because the client replaces a validated packet length with an attacker-controlled value from the IP header without re-val...

CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

CVE-2023-30212-Lab

CVE-2023-30212-Lab GitHub repository with Dockerfile and files to create a vulnerable environment for CVE-2023-30212, enabling exploration of the exploitability of this security vulnerability. Ideal for research and security enthusiasts to study and understand the impact of the vulnerability in a...

CVE-2026-54700

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the SSH protocol parser trusts attacker-controlled inner byte lengths and element counts without verifying that they fit in the containing packet. A malicious or compromised SSH server can...

CVE-2026-54697

ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength accepts excessive long-form DER length octets, accumulates them into an Int, and primitive readers allocate arrays without checking the declared size against the remaining...

CVE-2026-101899

The Axios HTTP client (versions 1.15.0 through 1.20.0 ) contains a vulnerability where the shouldBypassProxy function incorrectly treats NO_PROXY CIDR entries as textual hostname suffixes instead of evaluating the network range. This causes requests targeting addresses covered by CIDR bypass rule...

CVE-2026-90234

A flaw was found in the Linux kernel's Network File System NFS client. When an NFS server grants a delegation, the client may fail to record it and not send a DELEGRETURN message. This can lead to a situation where the server believes the client still holds the delegation. If the server then...

CVE-2026-102603 Gotify: Insufficiently Protected Password Change endpoint

Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the password change endpoint POST /current/user/password accepts a valid client token without requiring the account's current password or another elevated authentication step. An attack...

CVE-2026-102603

The Gotify server is vulnerable to an insufficiently protected password change endpoint (POST /current/user/password) in versions prior to 3.0.0 . The software fails to require the account's current password or an elevated authentication step, accepting only a valid client token. An attacker who ...

CVE-2026-102603 Gotify: Insufficiently Protected Password Change endpoint

Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the password change endpoint POST /current/user/password accepts a valid client token without requiring the account's current password or another elevated authentication step. An attack...

CVE-2026-109953

FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restricted-admin option fails to suppress CredSSP credential delegation, sending the cleartext password to the RDP server. A compromised or man-in-the-middle destination host can decode...