CVE-2026-36425

CVE-2026-36425 : Terminazione Arbitraria dei Processi in OPSWAT AppRemover Un driver kernel OPSWAT firmato che termina qualsiasi processo su richiesta. Nessun diritto di amministratore richiesto, nessun controllo dei privilegi, nessuna domanda. Puntalo a un EDR, a un antivirus, a un processo...

CVE-2026-51385

CVE-2026-51385 Advisory per CVE-2026-51385. Era necessario pubblicarlo perché GRAPHIFY non ha riconosciuto l'advisory e non lo ha pubblicato, e MITRE ha assegnato CVE-2026-51385, questo è l'advisory per essa. ES: Questa è stata la mia prima CVE, per essere onesto ho trovato un modo per rompere la...

CVE-2026-71297

A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...

CVE-2026-93326 Crafted Git build source can bypass certain policy validation

A build step for a Git source, crafted in a specific way, can bypass some policy validation rules. A malicious build definition can make the repository look like it is coming from a different remote URL than it really is when Git clone is happening. If policy is doing more stricter validation, fo...

EUVD-2026-92787

A build step for a Git source, crafted in a specific way, can bypass some policy validation rules. A malicious build definition can make the repository look like it is coming from a different remote URL than it really is when Git clone is happening. If policy is doing more stricter validation, fo...

CVE-2026-93326

A vulnerability exists in buildkit where a specially crafted Git build source can bypass certain policy validation rules. A malicious build definition can trick the system into making a repository appear as if it originated from a different remote URL during a Git clone . This occurs due to an in...

CVE-2026-93326 Crafted Git build source can bypass certain policy validation

A build step for a Git source, crafted in a specific way, can bypass some policy validation rules. A malicious build definition can make the repository look like it is coming from a different remote URL than it really is when Git clone is happening. If policy is doing more stricter validation, fo...

CVE-2026-41651

🔥 CVE-2026-41651 — TOCTOU Privilege Escalation Locale in PackageKit Pack2TheRoot Exploit di escalation dei privilegi locale che prende di mira il demone PackageKit. Permette di passare da un utente locale non privilegiato a root sfruttando una vulnerabilità di razza TOCTOU. 📌 Panoramica...

cve-2025-29927

CVE-2025-29927-PoC-Exploit Proof-of-Concept per il bypass dell'autorizzazione nel middleware di Next.js Puoi eseguirlo contro una versione vulnerabile qui: https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927 Esecuzione L'esecuzione è semplice. 1. Python3 CVE-2025-29927-PoC-Exploit.py ...

CVE-2025-29927

Demo della vulnerabilità Next.js CVE-2025-29927 Questo repository contiene una dimostrazione della vulnerabilità Next.js CVE-2025-29927, che interessa le versioni di Next.js 15.2.2 e precedenti. La vulnerabilità consente agli attaccanti di bypassare i controlli di autenticazione del middleware...

CVE-2026-105693 Penpot: Anonymous share-link token disclosure & page-scope bypass via get-view-only-bundle

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the unauthenticated get-view-only-bundle RPC returns every share-link row for a file even when the caller authenticated with only one scoped share link. A holder of a restrictive link can obtain other links' secret IDs, pa...

CVE-2026-105693

The open-source design and prototyping platform Penpot is vulnerable to an anonymous share-link token disclosure and page-scope bypass in versions prior to 2.18.0 . The unauthenticated get-view-only-bundle RPC incorrectly returns every share-link row for a file, even when a caller authenticates w...

CVE-2026-105693 Penpot: Anonymous share-link token disclosure & page-scope bypass via get-view-only-bundle

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the unauthenticated get-view-only-bundle RPC returns every share-link row for a file even when the caller authenticated with only one scoped share link. A holder of a restrictive link can obtain other links' secret IDs, pa...

CVE-2026-105693 Penpot: Anonymous share-link token disclosure & page-scope bypass via get-view-only-bundle

Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the unauthenticated get-view-only-bundle RPC returns every share-link row for a file even when the caller authenticated with only one scoped share link. A holder of a restrictive link can obtain other links' secret IDs, pa...

CVE-2026-71297

A flaw in the maestro gRPC broker allows a remote attacker with a valid client certificate to bypass authentication because the broker lacks an auth interceptor and client mTLS is optional. This vulnerability enables unauthorized subscription to other consumers' event streams, potentially causing...

CVE-2026-71297 Maestro: maestro: grpc broker has no auth interceptor and client mtls is optional

A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...

EUVD-2026-92711

A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...

CVE-2026-71297 Maestro: maestro: grpc broker has no auth interceptor and client mtls is optional

A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...

CVE-2026-71297

A flaw was found in the maestro gRPC broker. This vulnerability allows a remote attacker, with a valid client certificate, to bypass authentication. This bypass enables the attacker to subscribe to other consumers' event streams, leading to unauthorized information disclosure, or to publish forge...

CVE-2026-43866

Riproduttore del bypass del filtro di DefaultExchangeHolder forgiato camel-jms CVE-2026-43866 Questo progetto dimostra CVE-2026-43866 , un bypass della correzione di CVE-2026-40860 nei componenti camel-jms e camel-sjms / famiglia JMS di Apache Camel. CVE-2026-40860 ha aggiunto una allow-list di...