11388 matches found
CVE-2026-40323 SP1 V6 Recursion Circuit Row-Count Binding Gap
SP1 is a zero‑knowledge virtual machine that proves the correct execution of programs compiled for the RISC-V architecture. In versions 6.0.0 through 6.0.2, a soundness vulnerability in the SP1 V6 recursive shard verifier allows a malicious prover to construct a recursive proof from a shard proof...
Azure File Sync Agent v22.3 Release – April 2026 (KB5087090)
Azure File Sync Agent v22.3 Release – April 2026 KB5087090...
Azure File Sync Agent v22.3 Release – April 2026 (KB5087090)
Azure File Sync Agent v22.3 Release – April 2026 KB5087090...
Azure File Sync Agent v22.3 Release – April 2026 (KB5087090)
Azure File Sync Agent v22.3 Release – April 2026 KB5087090...
EUVD-2026-23271
Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks...
CVE-2026-5426
Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks...
Digital Knowledge KnowledgeDeliver 安全漏洞
Digital Knowledge KnowledgeDeliver is an online learning management system developed by Digital Knowledge Company. Versions of Digital Knowledge KnowledgeDeliver prior to February 24, 2026, contained security vulnerabilities. These vulnerabilities stemmed from hard-coded ASP.NET/IIS machineKey...
PT-2026-33340
Name of the Vulnerable Software and Affected Versions Digital Knowledge KnowledgeDeliver versions prior to February 24, 2026 Description Hard-coded ASP.NET/IIS machineKey values in standardized web.config files allow unauthenticated remote code execution. Attackers can use these shared keys to...
pentest-with-LLM
🛡️ pentest-with-LLM - Run Guided Security Testing !Download...
MCPThreatHive: Automated Threat Intelligence for Model Context Protocol Ecosystems
The rapid proliferation of Model Context Protocol MCP-based agentic systems has introduced a new category of security threats that existing frameworks are inadequately equipped to address. We present MCPThreatHive, an open-source platform that automates the end-to-end lifecycle of MCP threat...
GROWI 安全漏洞
GROWI is an enterprise-level open-source knowledge base/Wiki system built using Node.js and React by GROWI Inc. GROWI versions 7.4.6 and earlier have a security vulnerability that stems from a storage-side cross-site scripting attack, which could allow arbitrary scripts to be executed in the user...
2026-04 Dynamic Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5082200)
2026-04 Dynamic Cumulative Update for Windows 10 Version 21H2 for x64-based Systems KB5082200...
2026-04 .NET 9.0.15 Security Update for x64 Client (KB5086097)
2026-04 .NET 9.0.15 Security Update for x64 Client KB5086097...
2026-04 .NET 9.0.15 Security Update for x86 Client (KB5086097)
2026-04 .NET 9.0.15 Security Update for x86 Client KB5086097...
2026-04 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10 Version 1809 (KB5084066)
2026-04 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows 10 Version 1809 KB5084066...
2026-04 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 (KB5084070)
2026-04 Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 for x64 KB5084070...
2026-04 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5082123)
2026-04 Cumulative Update for Windows 10 Version 1809 for x86-based Systems KB5082123...
2026-04 .NET 10.0.6 Security Update for x64 Server (KB5086095)
2026-04 .NET 10.0.6 Security Update for x64 Server KB5086095...