CVE-2026-56291

CVE-2026-56291 — Balbooa Forms Joomla 大规模 RCE 利用 无需认证的 form.uploadAttachmentFile → 无 CSRF → PHP 上传 概述 CVE-2026-56291 是 Balbooa Forms combaforms Joomla 扩展 CISA KEV： 添加于 2026 年 7 月 10 日 —— 已确认被积极利用。 漏洞机制 根因 // FormModel::uploadAttachmentFile frontend/models/forms/FormModel.php L122 // No...

DEBIAN-CVE-2026-104038

A flaw was found in sssd. A remote attacker can cause a denial of service DoS by submitting a certificate that lacks an expected Security Identifier SID extension. In deployments configured with SID-based certificate mapping rules, the service fails to verify the presence of the extension before...

CVE-2026-104038

A flaw was found in sssd. A remote attacker can cause a denial of service DoS by submitting a certificate that lacks an expected Security Identifier SID extension. In deployments configured with SID-based certificate mapping rules, the service fails to verify the presence of the extension before...

CVE-2026-104038

A flaw was found in sssd. A remote attacker can cause a denial of service DoS by submitting a certificate that lacks an expected Security Identifier SID extension. In deployments configured with SID-based certificate mapping rules, the service fails to verify the presence of the extension before...

UBUNTU-CVE-2026-104038

A flaw was found in sssd. A remote attacker can cause a denial of service DoS by submitting a certificate that lacks an expected Security Identifier SID extension. In deployments configured with SID-based certificate mapping rules, the service fails to verify the presence of the extension before...

[SECURITY] Fedora 45 Update: ocaml-ppx-stable-witness-0.17.0-17.fc45

Ppxstablewitnesss is a ppx extension for deriving a witness that a type is intended to be stable. In this context, stable means that the serialization format will never change. This allows programs running at different versions of the code to communicate safely...

CVE-2026-104038 Sssd: sssd: denial of service via missing sid extension in certificate mapping

A flaw was found in sssd. A remote attacker can cause a denial of service DoS by submitting a certificate that lacks an expected Security Identifier SID extension. In deployments configured with SID-based certificate mapping rules, the service fails to verify the presence of the extension before...

CVE-2026-104038 Sssd: sssd: denial of service via missing sid extension in certificate mapping

A flaw was found in sssd. A remote attacker can cause a denial of service DoS by submitting a certificate that lacks an expected Security Identifier SID extension. In deployments configured with SID-based certificate mapping rules, the service fails to verify the presence of the extension before...

CVE-2026-104038

A flaw was found in sssd. A remote attacker can cause a denial of service DoS by submitting a certificate that lacks an expected Security Identifier SID extension. In deployments configured with SID-based certificate mapping rules, the service fails to verify the presence of the extension before...

EUVD-2026-92896

A flaw was found in sssd. A remote attacker can cause a denial of service DoS by submitting a certificate that lacks an expected Security Identifier SID extension. In deployments configured with SID-based certificate mapping rules, the service fails to verify the presence of the extension before...

CVE-2026-104038

A vulnerability exists in sssd where a remote attacker can trigger a denial of service (DoS) . The flaw occurs in deployments using SID-based certificate mapping rules because the service fails to verify the presence of an expected Security Identifier (SID) extension before processing it. This la...

CVE-2026-104038

A flaw was found in sssd. A remote attacker can cause a denial of service DoS by submitting a certificate that lacks an expected Security Identifier SID extension. In deployments configured with SID-based certificate mapping rules, the service fails to verify the presence of the extension before...

PentagridResponseOverview

PentagridResponseOverview Extensión de Resumen de Respuestas para BurpSuite Autor: Tobias "floyd" Ospelt, @floydch, http://www.floyd.ch Pentagrid AG, https://www.pentagrid.ch Encuentra respuestas exóticas agrupando los cuerpos de las respuestas resumen de respuestas Esta extensión agrupa todos lo...

XSW

Extensión de Burp Suite para XML Signature Wrapping XSW La extensión XSW para Burp Suite automatiza el proceso de sondear endpoints SAML en busca de vulnerabilidades de Signature Wrapping. Cómo usar 1. Haz clic derecho sobre la solicitud de autenticación en Burp Suite y selecciona "WRAP Attack". ...

PT-2026-107061

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

PT-2026-106907

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the Network component. This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by using social engineering and a...

CVE-2026-106389: Incorrect Authorization

Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106210: Observable Discrepancy

Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106263: Improper Input Validation

Improper input validation in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-106424: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...