rami-kali-MCP

Red Team MCP Server MCP Model Context Protocol server that...

CVE-2026-30949 Parse Server is missing audience validation in Keycloak authentication adapter

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.5 and 8.6.18, the Keycloak authentication adapter does not validate the azp authorized party claim of Keycloak access tokens against the configured client-id. A valid acces...

CVE-2026-30949 Parse Server is missing audience validation in Keycloak authentication adapter

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.5 and 8.6.18, the Keycloak authentication adapter does not validate the azp authorized party claim of Keycloak access tokens against the configured client-id. A valid acces...

CVE-2026-30949 Parse Server is missing audience validation in Keycloak authentication adapter

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.5 and 8.6.18, the Keycloak authentication adapter does not validate the azp authorized party claim of Keycloak access tokens against the configured client-id. A valid acces...

EUVD-2026-10697

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-10688

Authentication bypass using an alternate path or channel in Azure Windows Virtual Machine Agent allows an authorized attacker to elevate privileges locally...

EUVD-2026-10682

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

EUVD-2026-10700

Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally...

EUVD-2026-10698

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-10689

Server-side request forgery ssrf in Azure MCP Server allows an authorized attacker to elevate privileges over a network...

EUVD-2026-10622

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-10649

Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-10619

Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

EUVD-2026-10635

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

EUVD-2026-10611

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-10620

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...

EUVD-2026-10625

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-10629

Deserialization of untrusted data in Windows System Image Manager allows an authorized attacker to execute code locally...

EUVD-2026-10637

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

EUVD-2026-10645

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...