CVE-2021-26855-PoC

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Original code was developed by https://github.com/GreyOrder. CVE-2021-26855 ssrf simple use of golang exercises Affected version Exchange Server 2013 is less than CU23 Exchange Server 2016 is less than CU18 Exchange Server 2019 is less than...

CyberClass

CyberClass This repository contains educational resources for Class'Code CyberClass. Files tree 📦CyberClass ------------------------------------ Root directory ┣ 📂docs --------------------------------------- Website sources ┃ ┣ 📂assets ----------------------------------- General assets logo,...

CVE-2022-41401

OpenRefine = v3.5.2 SSRF OpenRefine v=3.5.2 contains a Server-Side Request Forgery SSRF vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure. The root cause of this vulnerability lies ...

XStream <1.4.15 - Server-Side Request Forgery

XStream before 1.4.15 is susceptible to server-side request forgery. An attacker can request data from internal resources that are not publicly available by manipulating the processed input stream, thereby making it possible to obtain sensitive information, modify data, and/or execute unauthorize...

CLEANSTART-2026-HK03653 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources

CVE-2026-32283 affects multiple packages. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. See references for individual vulnerability details...

CVE-2026-77564 Talos Linux: Support bundle does not redact registry credentials

Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and 1.13.3, talosctl support includes the auth field from resources/registryconfigs.cri.talos.dev.yaml and sensitive content from etcfilespecs.files.talos.dev.yaml in generated support bundles instead of marking...

CVE-2026-77564

In Talos Linux versions prior to 1.12.9 and 1.13.3 , the talosctl utility fails to redact sensitive information when generating support bundles. Specifically, the auth field from resources/registryconfigs.cri.talos.dev.yaml and sensitive content from etcfilespecs.files.talos.dev.yaml are included...

DEBIAN-CVE-2026-98429

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep EQ resources alive while IRQ is registered The completion IRQ handler accesses the EQ state and DMA buffer. Its IRQ was registered before that state was initialized, while teardown released the buffer before freeir...

CVE-2026-98429 RDMA/efa: Keep EQ resources alive while IRQ is registered

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep EQ resources alive while IRQ is registered The completion IRQ handler accesses the EQ state and DMA buffer. Its IRQ was registered before that state was initialized, while teardown released the buffer before freeir...

CVE-2026-98429

In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: Keep EQ resources alive while IRQ is registered The completion IRQ handler accesses the EQ state and DMA buffer. Its IRQ was registered before that state was initialized, while teardown released the buffer before freeir...

CVE-2026-98429

The Linux kernel contains a vulnerability in the RDMA/efa subsystem where the completion IRQ handler accesses the EQ state and DMA buffer prematurely. The root cause is that the IRQ was registered before the state was initialized, and during teardown, the buffer was released before the handler wa...

CVE-2026-108070

A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal...

EUVD-2026-100980

A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal...

CVE-2026-108070

The TSplus Remote Access web server is vulnerable to an improper access control flaw. This vulnerability allows an unauthenticated remote attacker to bypass intended access restrictions and reach protected internal resources by using manipulated paths via the /socket.io/JWN/ endpoint. Exploitatio...

CVE-2026-108070 Improper Access Control Allows Unauthorized Access to Protected Internal Web Resources in TSplus Remote Access

A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal...

CVE-2026-110456

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device...

CVE-2026-110454

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device...

EUVD-2026-100817

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device...

CVE-2026-110456

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to access internal resources through the device...

CVE-2026-110456

The UniFi Protect AI Key is affected by an Improper Access Control vulnerability. A malicious actor with network access could exploit this flaw under specific conditions to access internal resources through the device. No specific root cause, affected versions, or remediation steps are provided i...