fuzztruction

Fuzztruction Fuzztruction is an academic prototype of a fuzzer that does not directly mutate inputs as most fuzzers do but instead uses a so-called generator application to produce an input for our fuzzing target. As programs generating data usually produce the correct representation, our fuzzer...

nmap

Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...

CVE-2026-58128

A flaw was found in Alan: Health Insurance for Android. This vulnerability allows a local malicious application on the same device to achieve arbitrary code execution or tamper with application data by overwriting sensitive files in the application's private storage. An attacker can exploit this...

CVE-2026-107029

A flaw was found in Pile. Due to insecure permission settings, an unauthorized attacker can invoke an exported application component. This vulnerability allows an attacker to access and overwrite arbitrary application data...

CVE-2026-94459

IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installation could use these credentials to authenticate to the application and access functionality available to the affected accounts, potentially resulting in...

CVE-2026-94459

The software IRISPowerscan contains default user accounts with predictable credentials . An unauthenticated attacker with network access to an affected installation can use these credentials to authenticate and access application functionality. This vulnerability could lead to unauthorised access...

EUVD-2026-116799

IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installation could use these credentials to authenticate to the application and access functionality available to the affected accounts, potentially resulting in...

CVE-2024-0044

CVE-2024-0044 Overview CVE-2024-0044 is a vulnerability discovered in certain Android applications that allows attackers to escalate privileges by exploiting a flaw in the run-as command. This vulnerability can be exploited by crafting a specific payload that grants unauthorized access to...

CVE-2026-107038

Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data...

PT-2026-132307

Name of the Vulnerable Software and Affected Versions Yet Another UPnP Controller version 50200 Description Insecure permissions allow unauthorized attackers to invoke an exported component. This issue enables an attacker to gain unauthorized access to the application, leading to arbitrary data...

EUVD-2026-113168

Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data...

CVE-2026-107038

Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data...

CVE-2026-107038

Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an exported component, leading to arbitrary data access and control of application data...

Tobe yaacc security vulnerability

Version 50200 of Tobe yaacc contains a security vulnerability stemming from improper permission settings. This allows unauthorized attackers to invoke exported components, potentially leading to arbitrary data access and control over application data...

CVE-2026-107038

The software Yet Another UPnP Controller (versionCode 50200 ) contains a vulnerability due to insecure permission settings (CWE-926). This flaw allows unauthorized attackers to invoke an exported component, which can result in arbitrary data access and the ability to control application data . Wh...

rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert

In rustls 0.23.44 and 0.23.45, application data that a client buffers before the handshake completes is sent to the server even when the server rejects Encrypted Client Hello ECH. When the server rejects ECH, the client completes the handshake with the outer ClientHello and authenticates the serv...

CVE-2026-97801

A flaw was found in .NET Framework. An unauthenticated remote attacker could exploit improper input validation by sending specially crafted input over the network. Successful exploitation allows an attacker to tamper with application data and make unauthorized modifications to the system state...

EUVD-2026-106267

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Application Data Sets. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-60869

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Application Data Sets. Supported versions that are affected are 8.61-8.63. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

CVE-2026-60869

A vulnerability exists in the Application Data Sets component of Oracle PeopleSoft (Enterprise PeopleTools) affecting versions 8.61-8.63 . A low-privileged attacker with network access via HTTP can exploit this difficulty-to-exploit vulnerability to gain unauthorized access to create, delete, or ...