859 matches found
Zitadel - User Registration Bypass
The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...
EUVD-2026-114893
Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http.ResourceIsolationRequestCycleListener obtains the page a request targets before it consults its resource isolation policies, because those policies are passed that page. Obtaining the page instantiates it, and...
CVE-2026-82898
Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http.ResourceIsolationRequestCycleListener obtains the page a request targets before it consults its resource isolation policies, because those policies are passed that page. Obtaining the page instantiates it, and...
CVE-2021-31166-Exploit
CVE-2021-31166-Exploit Exploit for MS Http Protocol Stack RCE vulnerability CVE-2021-31166 A specially crafted Http request targetting a vulnerable windows version will result into DOS attack. And the server will be rebooted with blue screen error. Http.sys is a windows kernel driver responsible...
CVE-2026-82898: Apache Software Foundation Apache Wicket: Incorrect order of security checks in Apache Wicket
Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http.ResourceIsolationRequestCycleListener obtains the page a request targets before it consults its resource isolation policies, because those policies are passed that page. Obtaining the page instantiates it, and...
PT-2026-135045
Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http.ResourceIsolationRequestCycleListener obtains the page a request targets before it consults its resource isolation policies, because those policies are passed that page. Obtaining the page instantiates it, and...
CVE-2020-5902-F5-BIGIP
CVE-2020-5902-F5-BIGIP Scan from a given list for F5 BIG-IP and check for CVE-2020-5902...
windows-security-cve-2017-8543
Example InSpec Profile This example shows the implementation of an InSpec profile...
PT-2026-133726
Name of the Vulnerable Software and Affected Versions JetBrains Toolbox App versions prior to 3.9.1 JetBrains Toolbox App versions prior to 3.8.2 IntelliJ IDEA versions prior to 2026.3 IntelliJ IDEA versions prior to 2026.2.4 Description The jetbrainsd daemon improperly trusts compromised...
Exploit for CVE-2026-109618
PHP Security Check A read-only Bash-based inventory tool for...
Linux Distros Unpatched Vulnerability : CVE-2026-70174
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-70174 Note that Nessus relie...
Microsoft .NET Framework (October 2026)
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. CVE-2026-70007 -...
ALPINE-CVE-2026-70174
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...
EUVD-2026-100222
Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network...
EUVD-2026-99690
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-70174
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-70174
The .NET runtime is vulnerable to a Remote Code Execution (RCE) flaw due to an improperly implemented security check for standard . An unauthorized attacker can exploit this vulnerability over a network to execute arbitrary code. The vulnerability has a CVSS score of 8.80 and is categorized under...
EUVD-2026-99516
Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-90177
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. This vulnerability arises because the atomic Read-Modify-Write RMW verification process does not consistently check pointer types across all execution paths. Specifically, it only records the instruction pointer type when...
