CVE-2026-113799 Slack Morphism verifier errors disclose valid HMACs in the logs

Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through 2.27.0 expose the correct Slack request HMAC when signature verification fails. For an invalid request, slack-morphism computes the correct signature for the attacker-controlled timestamp...

CVE-2026-113799

Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through 2.27.0 expose the correct Slack request HMAC when signature verification fails. For an invalid request, "slack-morphism" computes the correct signature for the attacker-controlled timesta...

CVE-2026-113799

The Slack Morphism client library (versions 1.0.0 through 2.27.0 ) contains a vulnerability where signature verification failures disclose valid HMACs in application logs. Specifically, the slack-morphism library computes the correct signature for an attacker-controlled request body and stores it...

Drupal SAML SSO – Service Provider encryption issue vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain an encryption-related vulnerability. This flaw stems from improper validation of encrypted signatures, potentially leading to signature spoofing...

Drupal Monobank payment API encryption issue vulnerability

The Drupal Monobank payment API versions prior to 0.0.0 and 1.0.3 contain an encryption-related vulnerability. This vulnerability stems from improper validation of encrypted signatures, potentially allowing signature forgery...

CVE-2026-112036

A flaw was found in MuPDF. A double-free memory vulnerability exists in the signature locking component when processing certain PDF documents. A remote attacker could exploit this flaw by enticing a user to open a specially crafted document, causing an application crash that results in a denial o...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities (CVE-2026-50010, CVE-2026-44249, CVE-2026-45416)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-50010 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final,...

Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities (CVE-2026-84185)

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM SOAR QRadar Plugin App has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-84185 DESCRIPTION: A flaw was found in the...

Security update for bouncycastle

This update for bouncycastle fixes the following issues: CVE-2026-17507: negative signed leafindex values from unsigned wire encodings can cause heap exhaustion bsc1284075. CVE-2026-17508: unbounded KDF iteration and memory parameters can cause resource exhaustion bsc1284073. CVE-2026-18036:...

CLEANSTART-2026-IV73686 OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack

Security vulnerability affects the nodejs-24 package. The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack...

CLEANSTART-2026-YZ01964 OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack

Security vulnerability affects the nodejs-24 package. The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack...

Exploit for CVE-2026-44714

B.A.B.E.F - A BITCOINJ AUTHENTICATION BYPASS EXPLOIT FRAMEWORK...

Exploit for CVE-2026-44714

BABEF This framework has been RE-WEAPONIZED & ex...

PT-2026-120675

Summary Slack Morphism exposes the correct Slack request HMAC when signature verification fails. For an invalid request, slack-morphism computes the correct signature for the attacker-controlled timestamp and request body and stores it in SlackEventWrongSignatureError.generated hash. The error's...

dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet10.0: dotnet: .NET Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-113469

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine...

CVE-2026-113469 Improper Signature Verification of Active Update Files

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine...

CVE-2026-113469 Improper Signature Verification of Active Update Files

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine...