76153 matches found
AlmaLinux 9.2 [TuxCare] Security Update: tar (ALMALINUX9.2:CLSA-2026:1787337920)
The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787337920 advisory. - A TOCTOU Time-of-Check Time-of-Use vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write...
CVE-2026-103592
The simple-php-router library, specifically versions through 5.4.1.7 , contains an IP restriction bypass vulnerability within the IpRestrictAccess middleware. The root cause allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections by spoofing HTTP headers such as X...
CVE-2026-103592 simple-php-router through 5.4.1.7 IP restriction bypass via forwarding headers
simple-php-router through 5.4.1.7 contains an IP restriction bypass vulnerability in the IpRestrictAccess middleware that allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections. Attackers can spoof X-Forwarded-For, CF-Connecting-IP, or Client-IP headers to...
CVE-2026-103399
A flaw was found in SoupServer libsoup. When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final non-1xx response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-aliv...
CVE-2026-103399
A flaw was found in SoupServer libsoup. When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final non-1xx response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-aliv...
CVE-2026-103399
A flaw was found in SoupServer libsoup. When an HTTP/1.x client sends a request with Expect: 100-continue and a request body, and SoupServer returns an early final non-1xx response before the body is read, the server neither drains the declared body bytes nor closes the connection. On a keep-aliv...
XCP_ng_CVE-2026-43284_tester
XCP-ng Dirty Frag 診断 — CVE-2026-43284 XCP-ng dom0 ホストが CVE-2026-43284 （「Dirty Frag」）に曝露されているかどうかを判定するコミュニティ製診断ツールです。これは、Linux カーネルの xfrm-ESP サブシステムにおけるローカル権限昇格の脆弱性です。 TL;DR（要約） — 標準の 4.19 dom0 カーネルを実行している現在の XCP-ng リリース（8.1、8.2、8.3）はすべて、脆弱なコード範囲に該当します。2026年5月現在、公式の XCP-ng...
CVE-2026-95616
An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's...
CVE-2026-74864
sogoyhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a verified user without performing password validation. Since Nginx does not strip this header, any client can supply it arbitrarily and gain access as any user,...
CVE-2026-95616 Apache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensions
An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's...
CVE-2026-95616
Apache WSS4J is vulnerable to an integer overflow in its DER bounds check, which allows an oversized allocation to bypass validation. An unauthenticated attacker can exploit this by sending a SOAP message containing an X.509 certificate where the SubjectKeyIdentifier extension declares a length o...
CVE-2026-95616 Apache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensions
An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's...
CVE-2026-74864 Authentication Bypass in sogo_yhn
sogoyhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a verified user without performing password validation. Since Nginx does not strip this header, any client can supply it arbitrarily and gain access as any user,...
CVE-2026-74864 Authentication Bypass in sogo_yhn
sogoyhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a verified user without performing password validation. Since Nginx does not strip this header, any client can supply it arbitrarily and gain access as any user,...
EUVD-2026-89796
sogoyhn configures SOGo with a parameter that forces the request with HTTP header "x-webobjects-remote-user" to be treated as sent by a verified user without performing password validation. Since Nginx does not strip this header, any client can supply it arbitrarily and gain access as any user,...
CVE-2026-74864
The sogo_yhn component contains an authentication bypass vulnerability because it configures SOGo to trust the x-webobjects-remote-user HTTP header as a verified identity without performing password validation. Since Nginx does not strip this header, an unauthenticated remote attacker can supply ...
CVE-2025-29927__Next.js
CVE-2025-29927 - Next.js ミドルウェア認証バイパス POC ⚠️ 法的声明 : このツールはセキュリティ研究、認可されたペネトレーションテスト、および教育目的にのみ使用されます。明示的な許可なくこのツールをターゲットシステムに使用することは違法であり、非倫理的です。 📋 概要 CVE-2025-29927 は Next.js の重大なセキュリティ脆弱性であり、攻撃者は x-middleware-subrequest ヘッダーの不適切な処理を悪用して、ミドルウェアベースの認証制御をバイパスできます。 🎯 脆弱性の詳細 属性| 値 ---|--- CVE ID|...
CVE-2026-88797
The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any authenticated user, such as a subscriber, to install and activate any hosted on the WordPress.org repository...
CVE-2026-88797
The Vayu X WordPress theme (versions prior to 1.0.6 ) is vulnerable to unauthorized plugin manipulation. The flaw exists because the theme fails to perform a capability check on a specific AJAX action and exposes the required nonce to all logged-in users. Consequently, any authenticated user, suc...
EUVD-2026-89614
The Vayu X WordPress theme before 1.0.6 does not perform any capability check on one of its AJAX actions and exposes the nonce guarding it to every logged-in user, allowing any authenticated user, such as a subscriber, to install and activate any hosted on the WordPress.org repository...