119528 matches found
DEBIAN-CVE-2026-92821
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
CVE-2026-92821
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
UBUNTU-CVE-2026-92821
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
CLEANSTART-2026-EA72905 RSA and DSA public key parsers did not enforce size limits on key parameters
CVE-2026-39829 affects multiple packages. The RSA and DSA public key parsers did not enforce size limits on key parameters. See references for individual vulnerability details...
CLEANSTART-2026-AU10912 SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate
CVE-2026-39835 affects multiple packages. SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. See references for individual vulnerability details...
CVE-2026-92821 Sssd: sssd: access control bypass via premature ldap access rule evaluation
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
CVE-2026-92821
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
CVE-2026-92821 Sssd: sssd: access control bypass via premature ldap access rule evaluation
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
CVE-2026-92821
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
PT-2026-106292
A flaw was found in SSSD. When configured to evaluate password expiration warnings before restrictive access rules in LDAP Lightweight Directory Access Protocol environments, an expired-password warning terminates rule evaluation early and treats the access request as successful. A remote...
CVE-2026-98190: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That helper only verifies the frame is long enough for the action categor...
PT-2026-106519
In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilc wfi p2p rx and mgmt tx start parsing a frame once ieee80211 is public action returns true. That helper only verifies the frame is long enough for the action...
PT-2026-107307
With repository FORCE PRIVATE = true, Gitea creates new repositories as private, but the post-receive hook still applied the repo.private=false push option to an empty repository created by push. Any user who can create repositories could make their new repository public in violation of the...
Linux Distros Unpatched Vulnerability : CVE-2026-98190
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: wilc1000: fix out-of-bounds read in P2P public action frames wilcwfip2prx and mgmttx start parsing a frame once ieee80211ispublicaction returns true. That...
RedditOSINT
RedditOSINT Reddit OSINT par nom d'utilisateur. Fournissez un nom d'utilisateur et l'outil renvoie tout ce que les archives publiques de Reddit ont indexé pour ce compte : publications, commentaires, ce qui a été supprimé et ce qui est toujours actif , schémas d'activité, identifiants divulgués e...
POC-CVE-2018-0114
POC-CVE-2018-0114 Ce dépôt contient la POC d'un exploit pour node-jose À partir de la dernière fusion python lib: base64,urllib,rsa,sys Exécution des tests Pour exécuter le script, lancez simplement la commande suivante : python jwk-node-jose.py "payload" key-size key-size sans Auteurs Andrea Ca...
CVE-2026-53435
CVE-2026-53435 — Десериализация Jenkins → Произвольное чтение файлов PoC Первое публичное доказательство концепции для CVE-2026-53435, созданное, когда существовало только уведомление, а PoC нигде не был опубликован. Восстановлено из расплывчатого однострочного уведомления за 8,5 часов пятничным...
CVE-2026-104975
The open-source project management tool Plane contains a cross-tenant asset authorization bypass in the Spaces app . Specifically, the EntityAssetEndpoint and AssetRestoreEndpoint within plane/space/views/asset.py serve public-board operations under /api/public/ but fail to implement necessary me...
CVE-2026-104975 Plane: Cross-tenant asset authorization bypass in Plane Spaces public-board endpoints
Plane is an open-source project management tool. Prior to 1.4.0, Plane's dashboard asset endpoints in plane/app/views/asset/v2.py were remediated for two cross-tenant asset IDORs, CVE-2026-27705 and CVE-2026-46558. Those fixes added a membership check and projectid and workspaceslug scoping to th...
CVE-2026-104975 Plane: Cross-tenant asset authorization bypass in Plane Spaces public-board endpoints
Plane is an open-source project management tool. Prior to 1.4.0, Plane's dashboard asset endpoints in plane/app/views/asset/v2.py were remediated for two cross-tenant asset IDORs, CVE-2026-27705 and CVE-2026-46558. Those fixes added a membership check and projectid and workspaceslug scoping to th...