CVE-2026-105483

Node.js tls.checkServerIdentity regression: a host written with fullwidth digits is not recognized as an IP address and is matched through the DNS/CN path after IDNA normalization, bypassing the certificate hostname check. Fixed in 24.22.1 and 26.12.1...

PT-2026-120182

ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify edge type lightweight and unique schema flags without UPDATE SCHEMA permission. Attackers can send a bare ALTER TYPE edgeType WITH lightweight = true command over the HTTP, gRP...

RockyLinux 9 : openssh (RLSA-2026:85958)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:85958 advisory. openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-59997 openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck...

PT-2026-120158

Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such as ERC20.decimals, to be stored in uint256 variables without bounds checking. Malicious contracts can return values greater than 255 to manipulate or bypass contract logic that relies on these values...

php:7.4 security update

libzip 1.6.1-1 - update to 1.6.1 - enable lzma support 1.5.2-1 - update to 1.5.2 - add all explicit cmake options to ensure openssl is used even in local build with other lilbraries available 1.5.1-1 - update to 1.5.1 - drop dependency on zlib-devel and bzip2-devel no more referenced in libzip.pc...

RHEL 8 : php:7.4 (RHSA-2026:87080)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87080 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Out-of-bounds read via empt...

CVE-2022-46638

CVE-2022-46638 Its about vulnerability of AppLock Ver.5.6.2, a popular android app trusted by more than 100 million users in over 150 countries. PoC Unlock the application protected by AppLock just by tap the back button multiple times. 1. Open the application was locked by AppLock. 2. Dont input...

CVE-2026-29000

CVE-2026-29000 CVE-2026-29000: Critical Authentication Bypass in pac4j-jwt - Using Only a Public Key CVSS 10 pac4j-jwt Authentication Bypass Exploit CVE-2026-29000 Vulnerability Summary CVE-2026-29000 is a critical authentication bypass in the pac4j-jwt library versions 6.0.3 and below. When the...

CVE-2026-24061

-c0392b?style=flat GNU InetUtils telnetd - Unauthenticated Remote Root via NEW-ENVIRON Variable Injection Overview - Technical Analysis - Affected Versions - Usage - Remediation - References Vulnerability Overview CVE-2026-24061 is a critical authentication bypass vulnerability in the telnetd...

SUSE CVE-2026-110180

fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions from 2.4.2 through 2.4.7, from 3.1.3 through 3.1.8, and from 4.0.1 through 4.2.2, for HTTP-family schemes the canonicalizeHost function passes the parsed host to the WHATWG URL parser and adopts its hostname...

SUSE CVE-2026-110306

fast-uri is a dependency-free RFC 3986 URI parser and serializer for Node.js. In versions before 2.4.8, from 3.0.0 through 3.1.8, and from 4.0.0 through 4.2.2, fast-uri percent-decodes the scheme component with the legacy global unescape function before validating it, so an input whose decoded...

dirtyCow

Dirtycow also known as CVE-2016-5195 and it's very populer vulnerability of past time. First of all choose the fitted Linux version for that vulnerability. then install or run it on VBOX or VMWare . after install it follow those instructions. 1. Create a user without having root access. 2. Log in...

CVE-2026-24061-Scanner

CVE-2026-24061 Scanner: GNU Inetutils Telnet Exploit Checker CVE-2026-24061 Scanner is a Bash Script-based tool for performing detection reconnaissance and active verification active exploitation check of the Authentication Bypass vulnerability in the telnetd service of the GNU Inetutils package...

dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

dotnet10.0: dotnet8.0: dotnet9.0: ASP.NET Core Elevation of Privilege Vulnerability

Authentication bypass by spoofing in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2024-56339 DESCRIPTION: IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a remote attacker...

cPanel-WHM-CVE-2026-41940-AuthBypass

CVE-2026-41940 cPanel & WHM Authentication Bypass Scanner ⚠️ Legal Disclaimer This tool is intended for authorized security testing and educational purposes only. Users must comply with local laws and regulations; scanning unauthorized systems is strictly prohibited. The author is not responsible...

cmd/go: golang: cmd/go: Toolchain checksum verification bypass via crafted project configuration

A flaw was found in the Go toolchain cmd/go. When a user works inside a malicious Go project that forges a golang.org/toolchain go.sum entry and uses an untrusted Go module proxy, cmd/go can skip the canonical checksum database check for toolchain downloads. A tampered toolchain may then be...