BIT-GITLAB-2026-3035 Authentication Bypass Using an Alternate Path or Channel in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with project Maintainer permissions could have accessed the terminal of a protected environment they were no...

Important: Red Hat Security Advisory: runc security update

An update for runc is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application

A flaw was found in the crypto/x509 package within Go golang. When verifying a certificate chain, excluded DNS Domain Name System constraints are not correctly applied to wildcard DNS Subject Alternative Names SANs if the case of the SAN differs from the constraint. This oversight could allow an...

CVE-2025-66698

CVE-2025-66698 目标软件：Veda Semantic Machines v5.4.8（可能包含所有先前版本）。 漏洞类型：身份验证绕过。 CVE ID：CVE-2025-66698。 概述：系统对 ticket 参数的验证存在缺陷，将空字符串视为有效会话。 项目链接： Veda Semantic Machines 2025年11月18日：发现并初步提交 CVE 请求。 2026年1月9日：CVE ID 分配。尝试联系供应商（忽略并删除）。 2026年1月13日：因供应商未回应而公开披露。 此漏洞是在我进行安全研究审查代码时发现的。代码中的 ticket 参数未对空值进行检查...

CVE-2025-29927

CVE-2025-29927 — Next.js ミドルウェア認可バイパス 概要: Next.js のミドルウェアにおける脆弱性で、x-middleware-subrequest ヘッダーを偽装することで認可チェックをバイパスできます。 目次 CVE-2025-29927 — Next.js ミドルウェア認可バイパス 目次 脆弱なホストの収集 詳細情報 概要説明 脆弱性の詳細 CWE Weakness Enumeration 影響と追加リスク 影響を受けるバージョン CVSS とメトリクス PoC — ローカルでの安全な再現 マスチェック nuclei, Python Nuclei...

CVE-2025-12758

CVE-2025-12758: Bypass del Selector de Variación Unicode en isLength de Validator.js ID de CVE: CVE-2025-12758 Puntuación CVSS: 8.7 ALTA Severidad: ALTA CWE: CWE-792 Filtrado incompleto de una o más instancias de elementos especiales Publicado: 26 de noviembre de 2025 Divulgado: 19 de octubre de...

CVE-2026-42008

A flaw was found in Dovecot. Forwarded information from a host listed as a trusted proxy is not properly separated from Dovecot's internal authentication fields. This allows a malicious host configured as a trusted proxy to inject values as internal authentication fields, enabling it to...

CVE-2026-40205

A flaw was found in Dovecot. An attacker with a partially valid OAuth2 token can bypass authorization checks in remote token validation paths. This allows the attacker to authenticate with insufficient permissions, leading to a breach of integrity where the configured authorization policy is not...

cve-2025-25257

CVE-2025-25257 - Entorno de Experimentación Arquitectura de la Experimentación el entorno simula los componentes vulnerables de FortiWeb root@kitploit: Endpoint vulnerable : /api/system/fabric/config Vector de inyección : Header HTTP Authorization: Bearer Mecanismo : Concatenación SQL directa...

kernel: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC

A flaw was found in the Linux kernel's NFSv4 implementation. A local user could exploit a vulnerability where opening a file with OTRUNC truncate and ORDONLY read-only flags would bypass the necessary write permission checks. This oversight allows an attacker to truncate a file without having...

kernel: netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()

A flaw was found in the Linux kernel's nfnetlinkcthelper component. This vulnerability, an out-of-bounds read, occurs in the nfnlcthelperdumptable function when a network connection tracking helper is removed during a dump operation, leading to a bypassed bounds check. A local attacker could...

-WinVerifyTrust-Signature-Validation-CVE-2013-3900-Mitigation

CVE-2013-3900 是微软 WinVerifyTrust 函数处理 Windows Authenticode 签名验证方式中的一个远程代码执行漏洞。此缺陷允许攻击者修改已签名的可执行文件，通过在文件未经验证的部分添加恶意代码而不使其签名失效。 此漏洞的缓解措施是一项需要特定注册表设置的可选功能。启用后，Windows 将对 Authenticode 签名执行更严格的验证，确保签名文件中不存在无关数据。 -WinVerifyTrust-签名验证-CVE-2013-3900-缓解 Define the registry key paths $regPath32 =...

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis

Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that's been put to use by a Russia-aligned threat actor known as UAC-0099 against a target in Ukraine with an aim to interfere with artificial intelligence AI-assisted analysis. The idea, ESET said in a series of posts o...

CVE-2025-51458-exp

CVE-2025-51458-exp 预身份验证SQL注入在 DB-GPT --sql "SELECT VERSION" Dump tables python3 exp.py http://target:5670 --dump-tables Dump schema python3 exp.py http://target:5670 --dump-db DuckDB bypass python3 exp.py http://target:5670 --duckdb-bypass --sql "SELECT CURRENTSETTING'accessmode'" Interactive mo...

Exch-CVE-2021-26855_Priv

Exch-CVE-2021-26855 ProxyLogon は CVE-2021-26855 の正式な総称であり、Microsoft Exchange Server の脆弱性で、攻撃者が認証をバイパスして管理者になりすますことを可能にします。このバグは、別の認証後任意ファイル書き込み脆弱性 CVE-2021-27065 とチェーンすることで、コード実行を実現しています。影響を受けるすべてのコンポーネントはデフォルトで脆弱です！ その結果、認証されていない攻撃者は、開かれている 443 ポートのみを介して Microsoft Exchange Server 上で任意のコマンドを実行できま...

CVE-2024-3408-dtale

CVE-2024-3408 - Omisión de autenticación y RCE en D-Tale Entorno de laboratorio reproducible para CVE-2024-3408, una vulnerabilidad de omisión de autenticación y ejecución remota de código en D-Tale. Vulnerabilidad Las versiones de D-Tale hasta la 3.15.1 son vulnerables debido a: 1. SECRETKEY...

tar: tar: Hidden file injection via crafted archives

A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files...

CVE-2026-40204

A flaw was found in Dovecot. This vulnerability allows an attacker to bypass Access Control List ACL restrictions through the ldamailboxautocreate feature. This could potentially grant unauthorized access to mailboxes or other restricted resources. Mitigation Mitigation for this issue is either n...

CVE-2026-78319

A service running on the affected products contains a potential Time-of-Check Time-of-Use TOCTOU race condition. An unauthenticated remote attacker could exploit this race condition to bypass intended security controls. This may result in the execution of unauthorized code...

vulnerable-nextjs-14-CVE-2025-29927

Reproducción de omisión de autorización CVE-2025-29927 Este repositorio es una reproducción de la vulnerabilidad CVE-2025-29927 en el paquete next Cómo reproducir 1. Sigue los pasos a continuación para clonar y ejecutar la aplicación Next.js 2. Prueba que la autorización deniega el acceso al...