Lucene search
+L

47444 matches found

Kitploit
Kitploit
added 2026/08/23 1:40 p.m.3 views

camel-pqc-tls

TLS Post-Quantum con Apache Camel Questa repository contiene tre esempi che dimostrano gli handshake TLS 1.3 con crittografia post-quantistica PQC con Apache Camel, utilizzando lo scambio di chiavi ibrido X25519MLKEM768. X25519MLKEM768 combina il classico X25519 Diffie-Hellman su curva ellittica...

5.3AI score
SaveExploits0
NVD
NVD
added 2026/08/22 4:16 p.m.10 views

CVE-2026-74649

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...

8.8CVSS0.00288EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/08/22 3:32 p.m.9 views

EUVD-2026-64586

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...

5.9AI score0.00288EPSS
SaveExploits0References7
CVE
CVE
added 2026/08/22 3:32 p.m.24 views

CVE-2026-74649

A missing length validation in the Linux kernel rtl8723bs staging driver's WEP shared-key authentication handler (OnAuthClient()) allows a malicious Access Point to send a malformed WLAN_EID_CHALLENGE element with a length up to 255 bytes, which is then copied via memcpy() into a fixed 128-byte c...

8.8CVSS5.9AI score0.00288EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/08/22 3:32 p.m.28 views

CVE-2026-74649 staging: rtl8723bs: fix missing shared-key auth challenge length check

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...

8.8CVSS0.00288EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/22 3:32 p.m.13 views

CVE-2026-74649 staging: rtl8723bs: fix missing shared-key auth challenge length check

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chgtxt...

8.8CVSS6AI score
SaveExploits0References10
NVD
NVD
added 2026/08/22 2:16 p.m.12 views

CVE-2026-75870

Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret. The session keyword freezes its options onto the application as given: it does not require a secret, warn, or refuse to start when one is absent. The cookie...

9.1CVSS0.00491EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/22 1:35 p.m.31 views

CVE-2026-75870 Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret

Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret. The session keyword freezes its options onto the application as given: it does not require a secret, warn, or refuse to start when one is absent. The cookie...

0.00491EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/22 1:35 p.m.26 views

CVE-2026-75870

CVE-2026-75870 affects the Punk Perl web framework (by LNATION) in versions before 0.18 . When the session keyword is declared without a secret option (or with an undefined/empty one), both cookie read and write-back default the HMAC key to an empty string , resulting in a zero-length HMAC-SHA256...

9.1CVSS5.4AI score0.00491EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/22 1:35 p.m.9 views

EUVD-2026-64294

Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret. The session keyword freezes its options onto the application as given: it does not require a secret, warn, or refuse to start when one is absent. The cookie...

5.4AI score0.00491EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/22 12:26 p.m.31 views

CVE-2026-62381 luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow

luci-lib-px5g LuCI contains a heap-based buffer overflow in the native ASN.1 encoding routine asn1addobj x509write.c when signing a certificate with a 2040-bit RSA key. For a 255-byte signature, the BIT STRING allocation is computed from the DER length encoding of 255 bytes, but the payload writt...

6.9CVSS0.00076EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/22 12:00 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-74649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's...

8.8CVSS5.8AI score0.00288EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/22 12:00 a.m.17 views

PT-2026-79654

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix missing shared-key auth challenge length check The WEP shared-key authentication handler uses the challenge-text element's attacker-controlled length without checking it against the fixed 128-byte chg txt...

5.7AI score0.00288EPSS
SaveExploits0References8
OSV
OSV
added 2026/08/21 11:57 p.m.13 views

CVE-2026-77781 Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys

Tie::Hash::Regex versions before 2.0.0 for Perl will throw an exception on unparseable lookup keys. The FETCH, EXISTS and DELETE methods throw an exception when on malformed regular expressions. Each method falls back to a regex match when the key is not already stored in the hash, compiling the...

7.5CVSS5.6AI score
SaveExploits0References7
NVD
NVD
added 2026/08/21 10:16 p.m.16 views

CVE-2026-33240

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there was a Reflected Cross-Site Scripting XSS vulnerability in the foreign key search criteria API. This issue has been fixed in version 3.2.3...

8.8CVSS0.00269EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 9:25 p.m.13 views

EUVD-2026-64175

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there was a Reflected Cross-Site Scripting XSS vulnerability in the foreign key search criteria API. This issue has been fixed in version 3.2.3...

8.8CVSS5.3AI score0.00269EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/21 9:25 p.m.25 views

CVE-2026-33240

Combodo iTop , a web-based IT service management tool, is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the foreign key search criteria API prior to version 3.2.3 . The flaw allows an attacker to inject malicious scripts that execute in a victim's browser when they interact ...

8.8CVSS5.3AI score0.00269EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/21 9:25 p.m.28 views

CVE-2026-33240 Combodo iTop: Reflected XSS in foreign key search criteria

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there was a Reflected Cross-Site Scripting XSS vulnerability in the foreign key search criteria API. This issue has been fixed in version 3.2.3...

8.8CVSS0.00269EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/21 9:25 p.m.7 views

CVE-2026-33240 Combodo iTop: Reflected XSS in foreign key search criteria

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there was a Reflected Cross-Site Scripting XSS vulnerability in the foreign key search criteria API. This issue has been fixed in version 3.2.3...

8.8CVSS5.4AI score
SaveExploits0References4
NVD
NVD
added 2026/08/21 7:17 p.m.9 views

CVE-2026-53762

VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with WOLFCRYPT=1 and WOLFCRYPTBACKEND route SHA-256 and SHA-512 volume-header key derivation through derivekeysha256 and derivekeysha512 in src/Crypto/wolfCrypt.c, where the...

6.2CVSS0.0006EPSS
SaveExploits0References3
Rows per page
Query Builder