CVE-2026-76172

fast-uri is a URI parser for Node.js. During parsing it runs a legacy...

zeroheight-account-verification-bypass-CVE-2025-65925

CVE-2025-65925 — Controllo degli accessi errato in Zeroheight nel flusso di creazione account Data di divulgazione: 2025-06-11 Data di correzione del fornitore secondo il fornitore: 2025-06-13 Data di validazione del ricercatore: 2025-06-26 Scoperto da: Sneden Rebello Riepilogo Un percorso API...

HybridTestFramework

HybridTestFramework Unterstützt von In der Ära der Cloud-native-Welt können wir uns nicht auf ein bestimmtes Framework festlegen, aber aufgrund von Projektanforderungen müssen wir die bestehende Testlösung oft so weiterentwickeln, dass sie mehrere Testanforderungen erfüllen kann. Daher zielt dara...

ATAboy

Se non vuoi costruirne uno tuo, l'hardware può essere acquistato qui: https://obsoletetech.us/products/ataboy-an-open-source-legacy-ide-usb-bridge ATAboy è progettato per appassionati di retro computing, esperti di recupero dati e archivisti. Legge e scrive i più vecchi hard disk IDE, senza la...

bkcrack

bkcrack Cracke ältere Zip-Verschlüsselung mit dem Known-Plaintext-Angriff von Biham und Kocher. Überblick Ein ZIP-Archiv kann viele Einträge enthalten, deren Inhalt komprimiert und/oder verschlüsselt sein kann. Insbesondere können Einträge mit einem passwortbasierten symmetrischen...

CVE-2026-80346

StarRocks through 4.0.13 has a missing authorization vulnerability in the DROP MATERIALIZED VIEW code path for legacy synchronous materialized views. When such a view is dropped, the statement visitor returns without invoking the Authorizer , and the execution logic that should perform the check ...

CVE-2026-80346 StarRocks through 4.0.13 Missing Authorization on DROP MATERIALIZED VIEW for Legacy Synchronous Materialized Views

StarRocks performs no privilege check when a legacy synchronous materialized view is dropped. Every other statement type routed through AuthorizerStmtVisitor calls into Authorizer before execution, but visitDropMaterializedViewStatement returns immediately with a comment stating the check happens...

sudowp-clickfunnels-zurich

SudoWP Zurich für ClickFunnels Mitwirkende: SudoWP, WP Republic Ursprüngliche Autoren: Etison, LLC Schlagwörter: clickfunnels, security-patch, legacy, landing pages, funnels, sudowp Erfordert mindestens: 4.3 Getestet bis: 6.7 Stabile Version: 0.1.1 Lizenz: GPLv2 oder später Sicherheitshinweis Die...

BIT-KEYCLOAK-2026-15571 Flaw in the legacy client-initiated account-linking endpoint of Keycloak

A flaw was found in the legacy client-initiated account-linking endpoint of Keycloak, a widely used open-source identity and access management solution. The mechanism used to protect the account-linking process from unauthorized requests relies on a hash that can be predicted by a malicious OIDC...

DEBIAN-CVE-2026-77337

CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Versions before 2.11.2, from 3.0.0 through 3.3.6, and from 4.0.0 through 4.2.0 allow authentication bypass and potential CPU or memory exhaustion when CookieAuthenticator uses...

CVE-2026-77337 CakePHP: Potential Authentication bypass with CookieAuthenticator

CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Versions before 2.11.2, from 3.0.0 through 3.3.6, and from 4.0.0 through 4.2.0 allow authentication bypass and potential CPU or memory exhaustion when CookieAuthenticator uses...

CVE-2026-77337

CakePHP Authentication (a plugin for CakePHP and PSR-7 based applications) is affected by a critical vulnerability (CVSS 4.0: 9.1 ) in the CookieAuthenticator component. When legacy tokens are used, they are unencrypted and forgeable , enabling authentication bypass and potential CPU or memory ex...

CVE-2026-78370

RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to remain private. The /export/ endpoint permits selected internal databases to be exported without requiring authentication. While...

CVE-2026-78370

CVE-2026-78370 is a CRITICAL (CVSS 4.0: 9.2) authorization flaw in RansomLook , a ransomware intelligence platform. The legacy /export/ endpoint allowed unauthenticated remote users to export internal databases without consistently enforcing private-entity access restrictions, potentially disclos...

EUVD-2026-64843

RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to remain private. The /export/ endpoint permits selected internal databases to be exported without requiring authentication. While...

CVE-2026-78370 RansomLook Unauthenticated Database Export Exposes Private Data

RansomLook contains an authorization flaw in its legacy database export functionality that can allow unauthenticated remote users to retrieve information intended to remain private. The /export/ endpoint permits selected internal databases to be exported without requiring authentication. While...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net:sfc: Fixed issues with non-freezed interrupts in legacy IRQ mode. The SFC driver can be configured using modparam to work with MSI-X, MSI, or legacy IRQ interrupts. In the latter case, the interrupt wasn’t properly released...

Astra Linux – Vulnerability in Apache2

A regression in Apache HTTP Server 2.4.60 ignores some uses of the legacy content-type-based configuration for handlers. Configurations like “AddType” and similar settings, under certain circumstances where files are requested indirectly, can lead to exposure of local content in the source code...

Astra Linux – Vulnerability in Linux

In the Bluetooth BR/EDR Core Specification v5.2 and earlier, legacy pairing and secure-connection pairing authentication mechanisms may allow an unauthenticated user to complete the authentication process without using pairing credentials through adjacent access. An unauthenticated, adjacent...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: xfs: Fixed the allocation of the log recovery buffer for the legacy hsize parameter. The commit a70f9fe52daa “xfs: detects and handles invalid iclog size settings provided by mkfs“” added a fix for incorrect hsize values used ...