Keycloak input validation error vulnerability

Keycloak has an input validation error vulnerability. This vulnerability arises because the secure-redirect-uris-enforcer client policy validates hostnames via DNS resolution when allowing loopback addresses. Attackers can exploit this by using hostnames that resolve to loopback addresses, thereb...

CVE-2021-37740

Proof of Concept for CVE-2021-37740 Table of Contents Introduction The Vulnerability Executing the PoC Remediation Coordinated Vulnerability Disclosure License Change Log Introduction CVE-2021-37740 is a denial of service DoS vulnerability that affects firmware v3.0.3 of the KNXnet/IP Secure rout...

CVE-2026-76418

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service...

CVE-2026-76418 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service...

CVE-2026-76418

A logic error in the Remote Access SSL VPN service of Cisco Secure Firewall ASA and FTD Software allows an unauthenticated, remote attacker to cause the device to reload unexpectedly, leading to a denial-of-service (DoS) condition. The vulnerability is triggered by sending a crafted request when ...

EUVD-2026-112462

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service...

CVE-2026-76418 Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service...

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service...

Vulnerabilities have been addressed in Cisco Secure Firewall ASA, Threat Defense, and Management Center

Cisco has addressed vulnerabilities in the Secure Firewall ASA, Threat Defense, and Management Center software products. Cisco has categorized these vulnerabilities into eight distinct vulnerability classes CWE, assigning each a unique CVE identifier. The vulnerabilities involve various security...

Ivanti Connect Secure - Stack-based Buffer Overflow

Ivanti Connect Secure 22.7R2.5, Ivanti Policy Secure 22.7R1.2, and Ivanti Neurons for ZTA gateways 22.7R2.3 contain a stack-based buffer overflow in the clientCapabilities parameter handling. This vulnerability allows remote unauthenticated attackers to execute arbitrary code through IF-T TLS...

Ivanti Connect Secure <= 22.8R2.4 - Authentication Bypass via X-DSCGI-PATH Header

Ivanti Connect Secure VPN appliances contain an authentication bypass vulnerability in how the appliance routes requests from front- and back-end processes to CGI script handlers. The URL path is used to determine whether a request is allowed welcome.cgi is public, while the X-DSCGI-PATH header...

VulnCheck KEV: CVE-2026-76418

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition...

CVE-2026-76418: Unchecked Return Value to NULL Pointer Dereference

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service...

PT-2026-129181

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall ASA Software affected versions not specified Cisco Secure Firewall FTD Software affected versions not specified Description A flaw exists in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security...

Improper handling of vulnerabilities in Cisco Secure Firewall Adaptive Security Appliance

The Cisco Secure Firewall Adaptive Security Appliance has a vulnerability related to improper exception handling. This vulnerability stems from a logical error when configuring supplementary authentication on tunnel groups. Unauthenticated remote attackers can send specially crafted requests whil...

passera

Note: I no longer have the time to continue development of Passera, but pull requests are more than welcome! The number one requested item would be an updated Firefox extension, since the latest API change broke the current release. Passera A simple tool that allows users to have strong unique...

secure-notes-api

Secure Notes API — Laboratory Work 1 Secure REST API with C...

cvmimage

Tinfoil Confidential VM Tinfoil CVM is a confidential virtual machine for secure inference and custom compute workloads on AMD SEV-SNP and Intel TDX. Every byte of the final image is explicitly declared and derived from pinned inputs, the hermetic build is byte-for-byte reproducible, and anyone c...

CVE-2021-22893_HoneyPoC2

CVE-2021-22893 THIS IS NOT A REAL EXPLOIT IT IS A HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ Proof-of-Concept PoC script to exploit Pulse Secure CVE-2021-22893. DO NOT RUN THIS. Usage Achieves RCE on Pulse Secure VPNs chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.sh -l ./exploit....

CVE-2026-98871

A flaw was found in the Linux kernel's AMD Cryptographic Coprocessor CCP driver. This vulnerability can lead to a Denial of Service DoS due to a deadlock during AMD Secure Encrypted Virtualization SEV platform initialization. When an error occurs while configuring firmware memory, improper lock...