CVE-2026-62367

Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider emailfallback option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local username+password account using only the email cla...

CVE-2026-62367 Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeover

Vikunja is an open-source self-hosted task management platform. In versions 1.0.0 through 2.3.0, when an administrator enables the per-provider emailfallback option on an OpenID Connect provider, Vikunja links an SSO login to a pre-existing local username+password account using only the email cla...

MAL-2026-17389 Malicious code in bungoma (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

CVE-2026-107815

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the CONNECT engine's DOS table type used an incorrect boundary check that permitted a one-byte null write beyond a stack buffer at an attacker-controlled offset...

CVE-2026-107815

A flaw was found in MariaDB. An authenticated user with permission to use the CONNECT storage engine can exploit an incorrect boundary check when handling DOS table types to write beyond the allocated stack buffer. This flaw could lead to arbitrary code execution or cause the database server to...

CVE-2026-107815

The MariaDB server (versions 10.6.1 through 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2) contains a one-byte out-of-bounds (OOB) write in the CONNECT engine 's DOS table type. The vulnerability is caused by an incorrect boundary check , allowing an attacker-controlled offset to trigger...

socks5

socks5 Socks5/Socks5h सर्वर और क्लाइंट यह प्रोजेक्ट Bridge के लिए प्रोटोकॉल समर्थन जोड़ने के लिए है, या इसका अकेले उपयोग किया जा सकता है उपयोग API दस्तावेज़ीकरण उदाहरण CONNECT कमांड के लिए समर्थन BIND कमांड के लिए समर्थन ASSOCIATE कमांड के लिए समर्थन लाइसेंस MIT लाइसेंस के तहत लाइसेंस प्राप्त।...

CVE-2023-46805_CVE-2024-21887

CVE-2023-46805 Ivanti ICS 9.x, 22.x और Ivanti Policy Secure के वेब घटक में एक प्रमाणीकरण बाईपास भेद्यता, जो एक दूरस्थ हमलावर को नियंत्रण जांचों को बायपास करके प्रतिबंधित संसाधनों तक पहुंचने की अनुमति देती है। उपयोग: ./CVE-2023-46805.sh https://fqdn:port ./CVE-2023-46805.sh https://my.vpn.ip:443...

midonescanner-android

MidONe Scanner اسکنر حرفه‌ای آی‌پی تمیز CDN · CLOUDFLARE · DNS ⬇️ دانلود APK · 🖥️ دانلود Windows · 📣 کانال تلگرام 🔍 چرا MidONe Scanner؟ بیشتر ابزارهای اسکن IP فقط یک ping ساده می‌زنند — عددی که هیچ ربطی به سرعت واقعی اتصال ندارد. MidONe Scanner متفاوت است: داده واقعی دانلود می‌کند. سرعتی که اپ نشان...

sisu

sisu ⚡ आपका AWS, एक फ़ाइल सिस्टम के रूप में। यह: grep -l "AdministratorAccess" iam/users//policies.json इसके बजाय: aws iam list-users --query 'Users.UserName' --output text | \ xargs -I sh -c 'aws iam list-attached-user-policies --user-name --query "AttachedPolicies.PolicyArn" --output text' | ...

CVE-2026-78339

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Protection...

CVE-2026-78341

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Unauthorized access...

CVE-2026-78340

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code executio...

CVE-2026-78023

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-78027

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery SSRF vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Server-side request forgery...

CVE-2026-78024

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery SSRF vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass,...

CVE-2026-78025

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism...

CVE-2026-78026

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

OnionHop

OnionHop V3 OnionHop V3 एक आधुनिक, क्रॉस-प्लेटफ़ॉर्म डेस्कटॉप ऐप Windows, macOS और Linux है जो आपके ट्रैफ़िक को Tor के माध्यम से रूट करता है। यह Tor को लोकल SOCKS प्रॉक्सी या सिस्टम-व्यापी टनल के रूप में चला सकता है, Smart Connect के साथ आपके नेटवर्क के लिए स्वचालित रूप से एक कार्यशील कनेक्शन...

Blackash-CVE-2025-0282

Blackash-CVE-2025-0282 الوصف ثغرة تجاوز سعة المخزن المؤقت المبنية على المكدس في Ivanti Connect Secure قبل الإصدار 22.7R2.5، وIvanti Policy Secure قبل الإصدار 22.7R1.2، وIvanti Neurons for ZTA gateways قبل الإصدار 22.7R2.3 تتيح لمهاجم غير مصادق عن بُعد تحقيق تنفيذ برمجيات عن بُعد. المقاييس CNA:...