smack

SMACK is both a modular software verification toolchain and a self-contained software verifier. It can be used to verify the assertions in its input programs. In its default mode, assertions are verified up to a given bound on loop iterations and recursion depth; it contains experimental support...

vaas-cve-2015-5477

الثغرة كخدمة - CVE 2015-5477 نظام Debian Wheezy Linux مع إصدار هش من bind9 لاستعراض CVS-2015-5477. نظرة عامة حاوية docker هذه مبنية على Debian Wheezy وتم تعديلها لاستخدام إصدار هش من bind9 مع التبعيات الإضافية المطابقة. الاستخدام احصل على الحاوية باستخدام docker pull hmlio/vaas-cve-2015-5477. شغّ...

CVE-2026-108105

Open5GS through 2.8.0 contains a reachable assertion vulnerability in mmegnhandlesgsncontextrequest that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configured SGSN address with a known UE IMSI or P-TMSI can...

CVE-2026-39453

The Red Lion Controls N-Tron 700 Series switch is vulnerable to a Reachable Assertion (CWE-617) flaw. Navigating to a specific URL on the device's web server triggers an automatic reboot. An attacker can automate this action using tools like curl to create a persistent Denial of Service (DoS) con...

CVE-2026-102916 Reachable assertion in illumos bhyve REP string instruction emulation allows guest to panic host

A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vieemulatemovs and vieemulatestos in usr/src/uts/intel/io/vmm/vmminstructionemul.c do not clear the VIESREPEAT status...

EUVD-2026-95795

Open5GS through 2.8.0 contains a reachable assertion vulnerability in mmegnhandlesgsncontextrequest that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configured SGSN address with a known UE IMSI or P-TMSI can...

CVE-2016-2569

مرحباً، شكراً لقراءة أول تدوينة لي. سنتناول اليوم إنشاء استغلال لأحد الأدوات مفتوحة المصدر وهو خادم الوكيل Squid للتخزين المؤقت. إذن ما هو Squido؟ Squid هو وكيل تخزين مؤقت للويب يدعم HTTP وHTTPS وFTP والمزيد. يقلل عرض النطاق الترددي ويحسن أوقات الاستجابة عن طريق التخزين المؤقت وإعادة استخدام صفحا...

CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille-

نشرة أمنية: رفض خدمة عن بُعد عبر تأكيد قابل للوصول في معالجة بادئة URL rouille معرّف CVE المعيَّن: CVE-2026-66754 الملخص تختبر Request::removeprefix عنوان URL المُفكَّك ترميز النسبة المئوية لكنها تؤكِّد على العنوان الخام. الطلب الذي يبدأ مساره المُفكَّك بالبادئة بينما لا يبدأ مساره الخام بها يجتا...

CVE-2026-97791 Apache CXF: STSTokenValidator can accept untrusted SAML assertions because it shares validation state between requests

In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS. That result was stored in one object shared by all requests, so one request could read another's result. A remote, unauthenticated attacker could send a forge...

CVE-2026-97791

In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS. That result was stored in one object shared by all requests, so one request could read another's result. A remote, unauthenticated attacker could send a forge...

EUVD-2026-95700

In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before deciding to send it to the STS. That result was stored in one object shared by all requests, so one request could read another's result. A remote, unauthenticated attacker could send a forge...

PT-2026-108867

Name of the Vulnerable Software and Affected Versions Apache CXF versions prior to 4.2.4 Apache CXF versions prior to 4.1.9 Apache CXF versions prior to 3.6.13 Description An issue exists in the STSTokenValidator where the result of the SAML assertion signature check is stored in an object shared...

Oracle Linux 8 : bind9.16 (ELSA-2026-79113)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-79113 advisory. - Prevent assertion failure in dns64 mode with break-dnssec yes CVE-2026-19666 - Prevent crash on wildcard responses containing both NSEC and NSEC3...

Security update for bind

This update for bind fixes the following issues: CVE-2026-19666: Use-after-free in queryaddnoqnameproof via the DNS64 filter64 path bsc1280433. CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dnsncacheadd bsc1280435. CVE-2026-80274: Validating resolver can abort while...

SUSE-SU-2026:4597-1 Security update for bind

This update for bind fixes the following issues: - CVE-2026-19666: Use-after-free in queryaddnoqnameproof via the DNS64 filter64 path bsc1280433. - CVE-2026-19667: Remote assertion failure via 16-bit length truncation in dnsncacheadd bsc1280435. - CVE-2026-80274: Validating resolver can abort whi...

vcenter_saml_login

vCenter SAML Login Tool Un outil pour extraire le certificat du fournisseur d'identité IdP des sauvegardes vCenter et se connecter en tant qu'Administrateur Contexte Généralement, lors de missions, nous accédons aux sauvegardes vCenter sur un serveur de fichiers ou obtenons un accès root à l'hôte...

CVE-2026-84276

IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the...

bind: bind9: Unexpected exit with NSEC and NSEC3 both present

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof...

CVE-2026-84276

IBM Guardium Data Protection version 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller . An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion . This flaw ca...

EUVD-2026-95168

IBM Guardium Data Protection 12.2.2 is affected by a denial-of-service vulnerability in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can provide malformed task data that triggers an unchecked type assertion, causing the...