46304 matches found
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in passwords in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in pam-pkcs11
PAM-PKCS11 is a Linux-PAM login module that enables user login using X.509 certificates. Prior to version 0.6.13, if certpolicy was set to none the default value, then pampkcs11 would only check whether the user was capable of logging into the token. An attacker could create a new token using the...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in the Media Router of Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in pgpool2
In Pgpool-II, there is a risk of exposing sensitive information due to incompatible policy issues. If a database user accesses the query cache, unauthorized table data may be retrieved for that user...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted inputs in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Low...
CVE-2021-35576
CVE-2021-35576 CVE-2021-35576 Sicherheitslücke zur Umgehung von Oracle Unified Audit, Details des Proof Of Concept sind hier veröffentlicht: https://databasesecurityninja.wordpress.com/2022/06/11/cve-2021-35576-bypassing-unified-audit-policy/ CVE-Details: https://vulners.com/cve/CVE-2021-35576...
CVE-2026-43735
CVE-2026-43735 WebKit divulgazione di informazioni cross-origin. Safari = 26.5.2: PATCHED NavigateEvent.sourceElement is null Principio Quando la pagina padre utilizza per attivare la navigazione di frammento di un iframe cross-origin, l'iframe riceve NavigateEvent.sourceElement che è l'elemento...
CVE-2026-67279
MikroTik RouterOS PoC-Sammlung Dieses Repository enthält Proof-of-Concept-PoC-Skripte für mehrere MikroTik RouterOS-Sicherheitsprobleme, die 2026 untersucht und dokumentiert wurden. Die Materialien sind ausschließlich für autorisierte Sicherheitsforschung, Laborvalidierung und kontrollierte Tests...
PT-2026-106223
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A build step for a Git source can be crafted to bypass certain policy validation rules. This allows a malicious build definition to misrepresent the remote URL o...
CVE-2026-93326: Incorrect Behavior Order: Validate Before Canonicalize
A build step for a Git source, crafted in a specific way, can bypass some policy validation rules. A malicious build definition can make the repository look like it is coming from a different remote URL than it really is when Git clone is happening. If policy is doing more stricter validation, fo...
Evaluating Behavioral Context for Interpretable IAM Policy Risk Scoring in Cloud Environments
IAM policy analysis typically emphasizes the authorization capabilities encoded in a policy, but security analyst review priority may also depend on the behavioral and environmental context surrounding a policy event. This paper evaluates whether contextual information provides measurable...
zappzarapp-php-security
⚡ zappzarapp/security Libreria PHP completa per la sicurezza che fornisce CSP, Security Headers, protezione CSRF, cookie sicuri, validazione delle password, sanitizzazione degli input, rate limiting, SRI, caricamento dei segreti, crittografia, sicurezza delle sessioni, autenticazione a due fattor...
aws-vault
AWS Vault !WARNING This project has been abandoned and it's not receiving any more updates. If you want to continue to receive updates or contribute, please feel free to look at the active fork at: https://github.com/ByteNess/aws-vault AWS Vault is a tool to securely store and access AWS...
CVE-2026-105161
A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...
Security Bulletin: Vulnerabilities reported in fast-uri-3.1.3.tgz are addressed in APIM 11.1
Summary Vulnerabilities reported in fast-uri-3.1.3.tgz are addressed in APIM 11.1 Vulnerability Details CVEID:CVE-2026-16221 DESCRIPTION: Impact: fast-uri versions from 2.3.1 through 4.1.0 including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2 do not treat a literal backslash character...
EUVD-2026-92118
A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...
CVE-2026-105161
A flaw exists in invariant-systems-ai aiir versions up to 1.7.0 within the Policy Gate Handler component. This vulnerability allows for improper verification of cryptographic signatures through an unknown function, which can be triggered via a remote manipulation. The impact includes potential in...
CVE-2026-105161 invariant-systems-ai aiir Policy Gate signature verification
A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...
CVE-2026-105161 invariant-systems-ai aiir Policy Gate signature verification
A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...