4051 matches found
FortiClient EMS - Authentication Bypass
Detects whether Fortinet hotfix FG-IR-26-099 for CVE-2026-35616 is missing by comparing behavioral responses from a certificate-authenticated endpoint. The template sends X-SSL-CLIENT-VERIFY: SUCCESS without certificate material and checks whether this spoofed header changes server behavior. id:...
BIT-NODE-2026-58042
A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
CVE-2026-66340
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:17+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01...
CVE-2026-66098
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:08+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01...
CVE-2026-66832
creationtimestamp| type| source ---|---|--- 2026-08-11 20:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-223-01...
TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore
The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attacks targeting Russian companies spanning instrumentation, electronics, transport, energy, IT, and software development sectors. Russian cybersecurity vendor Kaspersky...
CVE-2026-17264
creationtimestamp| type| source ---|---|--- 2026-08-06 20:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-218-01...
CVE-2020-7921
creationtimestamp| type| source ---|---|--- 2026-08-06 16:15:10+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-218-01...
CVE-2026-27871
creationtimestamp| type| source ---|---|--- 2026-08-06 16:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-218-02...
EUVD-2026-53434
IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files...
CVE-2026-18411
creationtimestamp| type| source ---|---|--- 2026-08-04 16:15:06+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-216-01 2026-08-05 22:01:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msejpf222g2t 2026-08-05 22:02:23+00:00| seen|...
CLSA-2026-1785727936 TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 26 org.springframework packages to address 4 CVEs. Fixed in 6.1.7-tuxcare.1...
CVE-2026-14194
Technical details about CVE-2026-14194 are not publicly available in the provided documents. Monitor for updates from official advisories.
ALPINE-CVE-2026-58041
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3reset directly, bypassing the...
CVE-2026-58042
A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
EUVD-2026-52553
A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
CVE-2026-58042
A flaw in Node.js can cause dns.resolveAny Aborts the Node.js Process When a DNS Response Contains More Than 256 A Records. Repeated triggering of this condition can lead to denial of service. This vulnerability affects Node.js 26.x, 24.x, and 22.x...
CVE-2026-58045
A flaw in Node.js allows a spoofed TypedArray byteLength to trigger a reachable assertion in the synchronous node:zlib APIs, causing the entire process to crash. All 11 synchronous zlib functions are affected. Repeated exploitation of this condition can result in a denial of service. This...
CVE-2026-58041
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3reset directly, bypassing the...