CVE-2021-22893_HoneyPoC2

CVE-2021-22893 THIS IS NOT A REAL EXPLOIT IT IS A HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ Proof-of-Concept PoC script to exploit Pulse Secure CVE-2021-22893. DO NOT RUN THIS. Usage Achieves RCE on Pulse Secure VPNs chmod +x exploit.sh ./exploit.sh 10.0.0.1 ./exploit.sh -l ./exploit....

CVE-2026-98871

A flaw was found in the Linux kernel's AMD Cryptographic Coprocessor CCP driver. This vulnerability can lead to a Denial of Service DoS due to a deadlock during AMD Secure Encrypted Virtualization SEV platform initialization. When an error occurs while configuring firmware memory, improper lock...

CVE-2026-116116

A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptographic signature. The attack needs to be approached locally. The exploit is now public and may be...

EUVD-2026-109608

A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptographic signature. The attack needs to be approached locally. The exploit is now public and may be...

CVE-2026-116116 Yoosee GM8135S Camera Secure Boot signature verification

A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptographic signature. The attack needs to be approached locally. The exploit is now public and may be...

CVE-2026-116116

A vulnerability exists in the Yoosee GM8135S Camera version 21.00.01.36 within an unknown function of the Secure Boot component. The issue stems from improper verification of cryptographic signatures (CWE-347, CWE-345). Successful exploitation requires local access and can result in high impact t...

CVE-2026-116116 Yoosee GM8135S Camera Secure Boot signature verification

A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptographic signature. The attack needs to be approached locally. The exploit is now public and may be...

aegisgraph

AegisGraph — Engineering Platform Graph-driven automated vulnerability discovery for secure messaging applications. 577 Industries' engineering implementation for DARPA SBIR Direct-to-Phase-II topic HR0011SB20254-12 ASEMA. -blue Looking for evaluator-facing artifacts? The sanitized public...

sclock

scLock Supercluster Lock Hardware-Bound 256-Slot Polymorphic VM, Non-Linear MBA $\mathbbZ2^64$ & Apple Secure Enclave Binary Protector for macOS arm64 Apple Silicon Developed byrelay relay // SYSTEMS -111111?style=for-the-badge&logo=apple -FF4F00?style=for-the-badge -15803D?style=for-the-badge Ge...

Yoosee gm8135s camera input validation error vulnerability

The Yoosee gm8135s camera running version 21.00.01.36 contains a security vulnerability. This vulnerability stems from improper encryption signature validation by the Secure Boot component, potentially allowing local attackers to bypass signature verification...

PT-2026-123162

A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown function of the component Secure Boot. Performing a manipulation results in improper verification of cryptographic signature. The attack needs to be approached locally. The exploit is now public and may be...

tink

Tink NOTE : Tink moved to github.com/tink-crypto and this repo is no longer active! As planned, we have split Tink into multiple GitHub repositories that are hosted at github.com/tink-crypto. As a consequence, we made this repository read-only and it is not going to be maintained moving forward. ...

Ivanti Connect Secure 25.1.2.x Authentication Bypass Triage

Ivanti Connect Secure versions 25.1.0.0 through 25.1.1.1, 25.1.2.x before 25.1.3.0, and 22.8R2 through 22.8R2.4 contain an authentication bypass by spoofing. This offline checker triages operator-supplied version data without testing exploitability. https://packetstorm.news/download/237521...

Ivanti Connect Secure 25.1.2.2 Authentication Bypass

Ivanti Connect Secure versions 25.1.1.1 and earlier, 25.1.2.2 and earlier, and 22.8R2.4 and earlier contain an authentication bypass by spoofing that may allow remote unauthenticated attackers to execute arbitrary commands...

Exploit for Authentication Bypass by Spoofing in Ivanti Connect_Secure

ivanti-connect-secure-cve-2026-104935-ch...

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface UEFI bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026, is suspected to be orchestrated by a...

Cisco Secure Client Secure Firewall Posture Module Privilege Escalation (cisco-sa-sec-client-priv-esc-muF8eZdm)

According to its self-reported version, Cisco Secure Client is affected by a vulnerability. - A vulnerability in the interprocess communication IPC channel of the Secure Firewall Posture module in Cisco Secure Client could allow an authenticated, local attacker to elevate privileges on an affecte...

CVE-2026-115519

The KNIME Business Hub (versions prior to 1.19.0 ) is vulnerable to session compromise because sensitive cookies lack the 'Secure' and 'HttpOnly' attributes. This flaw allows an unauthenticated remote attacker to hijack user sessions if secondary vulnerabilities, such as a cross-site scripting (X...

CVE-2026-115519 Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attack are present. A workaround is not...

CVE-2026-115519 Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attack are present. A workaround is not...