WebSecProbe

.png WebSecProbe — это утилита для тестирования безопасности, предназначенная для исследователей веб-безопасности, пентестеров и системных администраторов для анализа HTTP 403 Forbidden ответов и поведения контроля доступа в веб-приложениях. Инструмент помогает выявлять неправильные конфигурации,...

CVE-2026-47604

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47603

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47604

The NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver . The root cause is missing authorization checks , which allows a local user to access another process's GPU channel state . A successful exploit of this vulnerability may lead to information di...

CVE-2026-47604

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47604

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47603

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-47603

The NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in its kernel mode driver . Due to missing authorization checks , a local user can access the GPU channel state of another process. This vulnerability may lead to information disclosure . No specific remediation, exploit...

EUVD-2026-90180

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user may access another process's GPU channel state due to missing authorization checks. A successful exploit of this vulnerability might lead to information disclosure...

BIT-GITLAB-2026-92529 Incorrect Authorization in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass admin-configured AI tool governance controls for...

GitLab 19.0 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-8937)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an...

CVE-2025-29927-Nextjs-Analysis

CVE-2025-29927 Next.js 분석 이 저장소는 Docker에서 CVE-2025-29927을 분석하기 위해 만든 자체 호스팅 Next.js 랩 환경을 포함합니다. 개요 CVE-2025-29927은 Next.js 미들웨어에 구현된 권한 부여 검사와 관련된 취약점입니다. 이 프로젝트는 통제된 환경에서 미들웨어로 보호되는 라우트 동작을 관찰하기 위한 로컬 랩으로 구축되었습니다. 문서 분석 보고서: docs/CVE-2025-29927-Analysis-Report.md 스크린샷: docs/images/ PoC 스크립트:...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45507 info: name: Apache OFBiz -...

PT-2026-99359

Name of the Vulnerable Software and Affected Versions Budibase server versions prior to 3.45.0 Description An information disclosure issue exists where authenticated users can access application metadata and source code belonging to another tenant. By providing a victim tenant's appId to the 'GET...

EUVD-2026-85734

GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to access sensitive CI/CD variable values from debug-mode job traces through the Duo AI...

CVE-2026-92470

GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to access sensitive CI/CD variable values from debug-mode job traces through the Duo AI...

CVE-2026-18177

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization checks...

CVE-2026-18177 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization checks...

CVE-2026-18177

IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a security flaw where a remote attacker can execute unauthorized payment actions . The root cause is missing authorization checks (CWE-862), which could lead to high integrity impact and low availability impact. This vu...

CVE-2026-18177 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization checks...