CVE-2026-78406 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the deserialization of untrusted data...

CVE-2026-12091

IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3 are vulnerable to a denial of service (DoS) condition. The root cause is a heap-based out-of-bounds read triggered when a remote attacker sends a specially crafted request, result...

CVE-2026-82344

IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that exceed the fixed-size reassembly buffer, potentially resulting in denial o...

CVE-2026-104076 TVU Networks Receiver/Transceiver Missing Authentication via REST API

TVU Networks Receiver/Transceiver devices running firmware before version 7.9 contain a missing authentication vulnerability that allows remote unauthenticated attackers to read sensitive device information and modify device configuration via unprotected REST API endpoints. Attackers can send...

CVE-2026-104075

TVU Networks Receiver/Transceiver devices running firmware before version 7.9 are susceptible to an authentication bypass vulnerability in the web management login endpoint (POST /tvu/Login ). By submitting a crafted HTTP request with an empty or absent UserName parameter, remote unauthenticated ...

EUVD-2026-95239

IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary container images and gain control of managed edge clusters...

CVE-2025-62168

CVE-2025-62168 Divulgation d'informations du proxy Squid dans la gestion des erreurs Scanner Détection & PoC "En raison d'une défaillance dans la rédaction des identifiants d'authentification HTTP, Squid est vulnérable à une attaque de divulgation d'informations. Gravité : Ce problème permet à un...

CVE-disclosures

CVE-2026-3171 & CVE-2026-3170 – Archana M Divulgations officielles de vulnérabilités par Archana M. 🔹 CVE-2026-3171 Produit : SourceCodester / Patrick Mvuma Patients Waiting Area Queue Management System 1.0 Type de vulnérabilité : Cross-Site Scripting CWE-79 Fichier concerné : /queue.php Vecteur...

CVE-2026-107299 msgpack5: Reserved byte can cause unbounded stream buffering

msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder treats the reserved MessagePack byte 0xc1 as incomplete input instead of invalid input. When 0xc1 begins a stream, subsequent data remains buffered while the decoder waits for bytes that...

kernel: vsock/vmci: fix UAF when peer resets connection during handshake

A flaw was found in the vsock/vmci component of the Linux kernel. A remote attacker could exploit a Use-After-Free UAF vulnerability when a peer resets a connection during the handshake process. This occurs because the system incorrectly handles reset packets, leading to a pending socket being le...

CVE-2026-14905

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive...

CVE-2021-32162

..| CSRFtoCommandInjection2 |.. الوصف : استغلال هجوم تزوير الطلب عبر المواقع CSRF للحصول على حقن أوامر من خلال ميزة مدير الملفات في Webmin الإصدار المختبر : Webmin 1.973 أحدث إصدار من GitHub 07/03/2021 نوع الهجوم: عن بُعد التأثير : تنفيذ الأوامر eXploit's C0de POC : بائع المنتج :...

CVE-2026-14269 IBM DataPower Gateway Buffer Overflow

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. An unauthenticated remote attacker could overflow the buffer and execute arbitrary...

CVE-2026-79993

A flaw was found in Apache ZooKeeper. The deleteContainer opcode is processed without verifying Access Control List ACL permissions. A remote, unauthenticated attacker with network access to the ZooKeeper client port can delete any empty persistent znode, including container and TTL nodes. This c...

CVE-2023-30146

CVE-2023-30146 - استغلال كاميرا ويب Assmann/HooToo - كشف البيانات الحساسة الوصف تم اكتشاف ثغرة في كاميرات IP ذات العلامة التجارية HooToo وAssmann. يخزّن البرنامج الثابت firmware بيانات اعتماد المدير والمستخدم في النسخة الاحتياطية كنص صريح plaintext. يمكن استرجاع النسخة الاحتياطية وفك ضغطها دون...

CVE-2026-16161

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...

CVE-2026-16163

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause memory corruption due to an out-of-bounds write...

CVE-2025-492026

نشورة أمنية: CVE-2025-492026 ملخص تم تحديد ثغرة في Copilot AI تؤدي إلى تضمين رابط تشعبي غير مقصود في قسم "مصدر الرابط" كلما استرد Copilot استعلام ويب. تسبب هذه المشكلة في نقر المستخدمين على روابط لـ https://www.collectingflags.com حتى عندما يكون الموضوع غير ذي صلة، مما قد يؤدي إلى تضليل أو تنقل غ...

CVE-2020-10128

CVE-2020-10128 - منتج SearchBlox قبل الإصدار V-9.2.1 عرضة لثغرة Cross Site Scripting المخزّنة وصف المنتج: SearchBlox يبسّط البحث المؤسسي للمؤسسات المعقدة. توفر أدوات SearchBlox البديهية والذكية إعدادًا جاهزًا، وتشفيرًا آمنًا، وتكلفة ملكية إجمالية منخفضة. تعمل الحلول المدعومة بالذكاء الاصطناعي على...

CVE-2024-48197

CVE-2024-48197 XSS منعكس في AudioCodes MP-202b الوصف ثغرة برمجة نصية عبر المواقع XSS في Audiocodes MP-202b الإصدار 4.4.3 تسمح لمهاجم عن بعد بتصعيد الصلاحيات عبر صفحة تسجيل الدخول للواجهة الويب. معلومات إضافية غير متاح نوع الثغرة برمجة نصية عبر المواقع XSS منعكس البائع Audiocodes قاعدة كود المنتج...