EulerOS Virtualization 2.10.0 : bind (EulerOS-SA-2026-3861)

According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...

CVE-2026-58269: Authentication Bypass Using an Alternate Path or Channel

Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, POST /api/auth/token authenticates with username and password only, then calls getTokens, which returns full access and refresh JWTs without checking whether the account has TO...

PT-2026-96234

Name of the Vulnerable Software and Affected Versions Sync-in Server versions prior to 2.4.0 Description An issue exists where the account lockout mechanism fails to trigger during repeated Time-based One-Time Password TOTP failures. When using the POST /api/app/sync/register endpoint to register...

PT-2026-96250

Name of the Vulnerable Software and Affected Versions Sync-in Server versions prior to 2.4.0 Description Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. The sync diff endpoint POST /api/app/sync/operation/diff/:id compiles a user-supplied string...

PT-2026-96251

Name of the Vulnerable Software and Affected Versions Sync-in Server versions prior to 2.4.1 Description An observable timing discrepancy exists in the login process. When an authentication attempt is made for a nonexistent account, the system returns a response immediately without performing the...

CVE-2017-3730

CVE-2017-3730 OpenSSL CVE-2017-3730 概念実証 OpenSSH をプロキシとして使用し、DH 値をその場でパッチする DHE-PSK-WITH-AES-256-GCM-SHA384 のような暗号スイートを使用して SSL サーバーを作成します。ここでは 10.0.2.2 のポート 8899 で実行するとします。 openssh-7.4p1 を取得します パッチを適用します ビルドします 次のように実行します: root@kitploit: ./ssh -vvv -N -D 1085 -o TCPKeepAlive=yes -o...

Security Bulletin: IBM Operator for Apache Flink is affected by Multiple Vulnerabilities

Summary IBM Operator for Apache Flink is affected by Multiple Vulnerabilities and was addressed in BM Operator for Apache Flink 1.5.5 Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname...

CVE-2026-92965

The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting on a sign-in code supplied in the URL, so any visitor can make the site redeem a code of their choosing against the advertising platform, using the site's own credentials. It matches that code...

EUVD-2026-83679

The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting on a sign-in code supplied in the URL, so any visitor can make the site redeem a code of their choosing against the advertising platform, using the site's own credentials. It matches that code...

CVE-2026-92965 TikTok 1.2.0 - 1.4.1 - Unauthenticated OAuth Code Redemption

The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting on a sign-in code supplied in the URL, so any visitor can make the site redeem a code of their choosing against the advertising platform, using the site's own credentials. It matches that code...

CVE-2026-92965

The TikTok WordPress plugin versions 1.2.0 through 1.4.1 is vulnerable to unauthenticated OAuth code redemption . The root cause is a failure to verify request authorization when processing a sign-in code provided in the URL. This allows any visitor to force the site to redeem an arbitrary code a...

PT-2026-95932

Name of the Vulnerable Software and Affected Versions TikTok WordPress plugin versions prior to 1.4.2 Description An issue exists where the plugin fails to verify if a request is authorized before processing a sign-in code provided in the URL. This allows any visitor to force the site to redeem a...

CVE-2026-92965: Missing Authorization

The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting on a sign-in code supplied in the URL, so any visitor can make the site redeem a code of their choosing against the advertising platform, using the site's own credentials. It matches that code...

CVE-2026-93761

An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid library may allow an unauthenticated party to cause excessive processing within an embedding application process. Applications that place user-supplied text into a pattern-matching query...

Improper Validation of Specified Quantity in Input

Overview Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input via the aresdnsparse function. An attacker can cause excessive heap memory allocation and degrade or deny name resolution services by sending specially crafted DNS responses with...

EUVD-2026-83207

An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid library may allow an unauthenticated party to cause excessive processing within an embedding application process. Applications that place user-supplied text into a pattern-matching query...

CVE-2026-93761 Denial of service via unbounded regex matching in Mongoid's in-memory query matcher

An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid library may allow an unauthenticated party to cause excessive processing within an embedding application process. Applications that place user-supplied text into a pattern-matching query...

CVE-2026-93761 Denial of service via unbounded regex matching in Mongoid's in-memory query matcher

An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid library may allow an unauthenticated party to cause excessive processing within an embedding application process. Applications that place user-supplied text into a pattern-matching query...

Denial of service via unbounded regex matching in Mongoid's in-memory query matcher

An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid library may allow an unauthenticated party to cause excessive processing within an embedding application process. Applications that place user-supplied text into a pattern-matching query...

CVE-2026-93761

CVE-2026-93761 affects the Mongoid library (MongoDB's Ruby ODM). The vulnerability resides in the in-memory query evaluation component , where an inefficient regular expression complexity issue (ReDoS) can be triggered when user-supplied text is placed into a pattern-matching query condition on a...