211891 matches found
CVE-2026-112430
An authentication issue in Apple macOS allows an application to potentially gain root privileges due to improper validation of user attributes. This vulnerability has been addressed in macOS Golden Gate 27.2 , macOS Sequoia 15.8.2 , and macOS Tahoe 26.7.2 . While the vulnerability's root cause is...
CVE-2026-112430
An authentication issue was addressed with improved validation of user attributes. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges...
EUVD-2026-110117
An authentication issue was addressed with improved validation of user attributes. This issue is fixed in macOS Golden Gate 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. An app may be able to gain root privileges...
CVE-2026-0073
CVE-2026-0073: Android Wireless Debugging adbd Authentication Bypass Disclaimer: This Proof of Concept PoC is provided strictly for educational and authorized security research purposes. Unauthorized access to computer systems is illegal. Always ensure you have explicit permission before testing...
DEBIAN-CVE-2026-65625
The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...
AZL-112187 CVE-2026-65625 affecting package rabbitmq-server 3.13.7-10
The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...
CVE-2026-65625
The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...
UBUNTU-CVE-2026-65625
The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...
CVE-2026-65625
The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...
Improper Authentication
Apache ActiveMQ Artemis is vulnerable to Improper Authentication. The vulnerability is due to insufficient validation of CORE protocol SESSIONREATTACH packets, which allows an unauthenticated remote attacker to hijack an existing authenticated session and take over its ongoing execution...
CVE-2026-65625
The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...
EUVD-2026-110303
The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in gcmblockdecrypt/6...
EEF-CVE-2026-65625 Attacker-controlled AES-GCM authentication tag length allows tag forgery in jose
Summary The pure-Erlang AES-GCM fallback in josejwaaes derives the number of verified authentication tag bits from the attacker-supplied tag itself. In the aesgcm, Bits clause of blockdecrypt/4, the incoming tag is guarded only by isbinary/1, with no check on its length. Verification in...
3snake
3snake - dump sshd and sudo credential related strings Disclaimer I Wrote This In College About Targeting rooted servers, reads memory from sshd and sudo system calls that handle password based authentication. Doesn't write any memory to the traced processes. Spawns a new process for every sshd a...
Origin Validation Error
Overview social-auth-core is a package that makes Python social authentication simple. Affected versions of this package are vulnerable to Origin Validation Error via the validateclaims method in socialcore/backends/openidconnect.py, where a nonce stored in shared association storage is not bound...
CVE-2026-116634
OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to issue sync tokens via POST /api/sync/tokens when requireLogin is disabled. Attackers can use the issued token against GET /api/sync/bundle to retrieve decrypted provider...
Security Bulletin:Multiple vulnerabilities in postgresql may affect IBM Infosphere Change Data Capture (CVE-2026-107314, CVE-2026-107315)
Summary Multiple security vulnerabilities have been identified in postgresql, PostgreSQL JDBC Driver Postgresql. postgresql is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...
CVE-2026-116634 OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens
OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to issue sync tokens via POST /api/sync/tokens when requireLogin is disabled. Attackers can use the issued token against GET /api/sync/bundle to retrieve decrypted provider...
CVE-2026-116634 OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens
OmniRoute 3.8.50 before 3.8.52 contains a missing authentication vulnerability that allows unauthenticated attackers to issue sync tokens via POST /api/sync/tokens when requireLogin is disabled. Attackers can use the issued token against GET /api/sync/bundle to retrieve decrypted provider...
CVE-2026-116634
OmniRoute versions 3.8.50 before 3.8.52 are vulnerable to a missing authentication flaw (CWE-306). When requireLogin is disabled, unauthenticated attackers can issue sync tokens via POST /api/sync/tokens. These tokens can be used against GET /api/sync/bundle to retrieve decrypted provider credent...