CVE-2026-13734: Authentication Bypass by Capture-replay

Zephyr's WireGuard VPN data-plane receive handler wgprocessdatamessage in subsys/net/lib/wireguard/wgcrypto.c validated the anti-replay counter too late. After AEAD decryption of a MESSAGETRANSPORTDATA packet succeeded, the code committed several peer-state changes — updatepeeraddr endpoint roami...

CVE-2026-71402

An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c reports the IP total length as the payload length instead of the length of the remaining UDP payload. Consequently, the DHCP option walker in the DHCPv4 client wickedd-dhcp4 rea...

SUSE CVE-2026-71402

An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c reports the IP total length as the payload length instead of the length of the remaining UDP payload. Consequently, the DHCP option walker in the DHCPv4 client wickedd-dhcp4 rea...

EUVD-2026-67080

An out-of-bounds read was found in the DHCPv4 packet capture code of wicked. nicaptureinspectudpheader in src/capture.c reports the IP total length as the payload length instead of the length of the remaining UDP payload. Consequently, the DHCP option walker in the DHCPv4 client wickedd-dhcp4 rea...

Security update for wicked

This update for wicked fixes the following issue: CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing bsc1274627. CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyond provided allocation in DHCPv4 capture parsi...

Security update for wicked

This update for wicked fixes the following issues: Update to version 0.6.79. CVE-2026-44932: indirect remote shell command injection due to insufficient sanitization of DHCP options written to /run/wicked/leaseinfo. files bsc1265221. CVE-2026-71401: out-of-bounds read due to IP length underflow i...

SUSE-SU-2026:3839-1 Security update for wicked

This update for wicked fixes the following issue: - CVE-2026-71401: out-of-bounds read due to IP length underflow in checksum handling of DHCPv4 capture parsing bsc1274627. - CVE-2026-71402: out-of-bounds read due to DHCP option reader being extended beyond provided allocation in DHCPv4 capture...

Hx0-HawkEye v1.0.6

🦅 Hx0 HawkEye: Full-stack lightweight capture & AI security auditing extension 【中文 / English】 1. What it is Skip the proxy hassle—truly ready out of the box. Hx0 HawkEye is a native browser extension Chrome / Firefox and mainstream Chromium that gives you a full capture, intercept HTTP + WebSocke...

EUVD-2026-66765

A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account...

SUSE CVE-2026-65905

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while...

PT-2026-82547

Name of the Vulnerable Software and Affected Versions wicked versions prior to 0.6.81 Description An integer underflow exists in the DHCPv4 packet capture code of the wickedd-dhcp4 client. The function ni capture inspect udp header in src/capture.c fails to verify that the IP total length field i...

PT-2026-82548

Name of the Vulnerable Software and Affected Versions wicked versions prior to 0.6.81 Description An out-of-bounds read exists in the DHCPv4 packet capture code. The function ni capture inspect udp header in src/capture.c incorrectly reports the IP total length as the payload length instead of th...

CVE-2026-41012- BOSH VSphere CPI Improper Cert Validation | Cloud Foundry

Severity HIGH CVSSv4: High 8.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSSv3: High 7.7 CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H Vendor Cloud Foundry Foundation Versions Affected Severity is HIGH unless otherwise noted. BOSH VSphere CPI All versions prior to v98.0.6...

CVE-2026-64632

A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account...

CVE-2026-64632

A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account...

CVE-2026-64632

CVE-2026-64632 is a High -severity vulnerability (CVSS v4.0: 8.5) in Veeam ONE that allows a low-privileged user over the network to capture the NTLM credentials of the Reporter service account , without requiring user interaction. The captured credentials enable subsequent-system compromise with...

CVE-2026-64632

A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account...

Pentest-Swarm-AI

The first open-source pentesting tool built on a real swarm — no...

EUVD-2026-66128

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while...

Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability

Authentication Bypass by Capture-replay vulnerability in Apache Tomcat's DIGEST authenticator. If, before windowSize requests have been made, a client makes a DIGEST authenticated request with a nonceCount on the upper boundary of the replay window then that request is replayable once only while...