CVE-2026-105306

A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server. The issue occurs because the registration process fails to filter security-sensitive client attributes when a new client is created. An attacker with a valid Initial Access Token can...

EUVD-2026-92255

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

CVE-2026-105302

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access tokens from external identity provider...

CVE-2026-105301

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

vi-bot

BotDetect v2 — Production Bot Detection Library Client-side bot and automation detection library with weighted scoring, behavioral analysis, browser fingerprinting, and configurable thresholds. Detects headless browsers, Selenium, Puppeteer, Playwright, CDP-based tools, and stealth automation...

FreeRDP: FreeRDP: Denial of Service via out-of-bounds read in URBDRC channel

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can exploit an out-of-bounds read vulnerability in the URBDRC USB device redirection channel. By sending a specially crafted message, the server can cause the FreeRDP client to read beyond its allocated memory, leading to...

1Panel-CVE-2025-54424-

CVE-2025-54424 CVE-2025-54424: 1Panel - RCE через обход клиентского сертификата. Комбинированный инструмент сканирование + эксплуатация Описание уязвимости 1Panel — это открытая, современная панель управления Linux, предоставляющая графический интерфейс для развертывания веб-сайтов, управления...

rapidresetclient

Rapid Reset Client Rapid Reset Client — это инструмент для тестирования мер защиты и подверженности уязвимости CVE-2023-44487 вектор DDoS-атаки Rapid Reset. Он реализует минимальный HTTP/2-клиент, который открывает один TCP-сокет, согласовывает TLS, игнорирует сертификат и обменивается фреймами...

dns_client_fuzzing

Фаззинг клиента DNS Microsoft Windows После обнаружения критической уязвимости CVE-2026-41096 я решил попробовать свои силы в этом...

CVE-2026-105223

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig and parseKubeconfigFile when a kubeconfig lacks certificate-authority-data, ignoring insecure-skip-tls-verify. On-path attackers can impersonate the Kubernetes API server to capture Bearer token...

bruno

Bruno - API를 탐색하고 테스트하기 위한 오픈소스 IDE. English | Українська | Русский | Türkçe | Deutsch | Français | Português BR | 한국어 | বাংলা | Español | Italiano | Română | Polski | 简体中文 | 正體中文 | العربية | 日本語 | ქართული | Nederlands | فارسی | हिन्दी Bruno는 Postman 및 이와 유사한 도구들이 만들어 놓은 현 상태를 혁신하는 것을 목표로 하는 새롭고...

CVE-2026-105223

The maclof kubernetes-client (versions 0.17.0 before 0.32.0 ) contains a vulnerability where the parseKubeconfig() and parseKubeconfigFile() functions disable TLS certificate verification if a kubeconfig lacks certificate-authority-data. This occurs even when insecure-skip-tls-verify is not set. ...

EUVD-2026-92155

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig and parseKubeconfigFile when a kubeconfig lacks certificate-authority-data, ignoring insecure-skip-tls-verify. On-path attackers can impersonate the Kubernetes API server to capture Bearer token...

CVE-2026-105223 maclof kubernetes-client 0.17.0 before 0.32.0 Disabled TLS Certificate Verification

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig and parseKubeconfigFile when a kubeconfig lacks certificate-authority-data, ignoring insecure-skip-tls-verify. On-path attackers can impersonate the Kubernetes API server to capture Bearer token...

CVE-2026-105223 maclof kubernetes-client 0.17.0 before 0.32.0 Disabled TLS Certificate Verification

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig and parseKubeconfigFile when a kubeconfig lacks certificate-authority-data, ignoring insecure-skip-tls-verify. On-path attackers can impersonate the Kubernetes API server to capture Bearer token...

CVE-2026-105223 maclof kubernetes-client 0.17.0 before 0.32.0 Disabled TLS Certificate Verification

maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig and parseKubeconfigFile when a kubeconfig lacks certificate-authority-data, ignoring insecure-skip-tls-verify. On-path attackers can impersonate the Kubernetes API server to capture Bearer token...

PT-2026-106220

Name of the Vulnerable Software and Affected Versions maestro gRPC broker affected versions not specified Description A flaw in the maestro gRPC broker allows a remote attacker possessing a valid client certificate to bypass authentication. This allows the attacker to subscribe to event streams...

CVE-2026-105301: Server-Side Request Forgery (SSRF)

A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured to check certificate revocation using CRL Distribution Points or OCSP. An attacker can provide a specially crafted certificate...

CVE-2026-58231

CVE-2026-58231 탐지 스크립트 CVE-2026-58231 용 탐지 및 사전 조건 검증 도구 — SAP Commerce Cloud의 Data Hub Adapter 구성 요소에서 발생하는 부적절한 인가 취약점 CVSS 10.0. 이 스크립트는 비파괴적 검사만 수행합니다. 코드 인젝션 페이로드를 포함하거나 실행하지 않습니다. 배경 CVE-2026-58231은 인증되지 않은 원격 공격자가 기본 인증 클라이언트를 악용하고 Data Hub Adapter의 검증이 충분하지 않은 함수에 조작된 입력을 제출하여 잠재적으로 임의 코드...

[SECURITY] [DLA 4819-1] php8.2 security update

Debian LTS Advisory DLA-4819-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin October 05, 2026 https://wiki.debian.org/LTS Package : php8.2 Version : 8.2.34-1deb12u1 CVE ID : CVE-2025-1218 CVE-2025-14181 CVE-2026-6103 CVE-2026-91765 CVE-2026-91766 CVE-2026-91767...