CVE-2022-3368

CVE-2022-3368 PoC for arbitrary file move vulnerability in Software Update component of Avira Security. Users have option to use this feature to update any outdated software on their PC ,when this feature is used Avira Security service will drop downloaded files in...

python-tuf

A Framework for Securing Software Update Systems The Update Framework TUF is a framework for secure content delivery and updates. It protects against various types of supply chain attacks and provides resilience to compromise. This repository is a reference implementation written in Python. It is...

firepwner

CVE-2015-6357: FirePWNER Exploit for Cisco FireSIGHT Management Center SSL Validation Vulnerability Introduction On its own the Cisco FireSIGHT Management Center Certificate Validation Vulnerability3 is a medium severity vulnerability with a CVSS of 5.1. However, this vulnerability is an example ...

Webnus Inc. Modern Events Calendar - Broken Access Control

Webnus Inc. Modern Events Calendar = 7.29.0 contains a broken access control vulnerability caused by incorrectly configured access control security levels, letting attackers bypass authorization, exploit requires no special privileges. id: CVE-2026-32583 info: name: Webnus Inc. Modern Events...

CVE-2024-22026

CVE-2024-22026 Exploit POC for CVE-2024-22026 affecting Ivanti EPMM "MobileIron Core" CVE-2024-22026 is a local privilege escalation vulnerability in Ivanti EPMM formerly MobileIron server versions prior to 12.1.0.0, 12.0.0.0, and 11.12.0.1. This vulnerability allows a local attacker to gain root...

CrackAVFee

CVE 2022 3368 Vulnerability in Software Update Discovered by: @Wh04m1001 - @pxcs https://github.com/Wh04m1001/CVE-2022-3368 Educational purposes only!...

CVE-2026-118791

The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification...

CVE-2026-118791

The CompuGroup Medical Wingesfar application is vulnerable to an insecure software update mechanism (CVE-2026-118791 ). The software update functionality lacks adequate authenticity and integrity validation , which allows the application to accept update packages without sufficient cryptographic ...

CVE-2026-118791 Insecure software update mechanism

The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification...

EUVD-2026-120030

The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification...

CVE-2026-118791: CompuGroup Medical Wingesfar: The application implements software update functionality without adequate authenticity and integrity validation,…

The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification...

PT-2026-140388

The application implements software update functionality without adequate authenticity and integrity validation, allowing update packages to be accepted without sufficient cryptographic verification...

CVE-2026-93571

A flaw was found in Szafir. A man-in-the-middle attacker who can intercept and reroute software update traffic can exploit a path traversal vulnerability in filename processing. By supplying a crafted update response containing manipulated file paths, the attacker can write arbitrary XML files to...

CVE-2026-64894

Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

EUVD-2026-118268

Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

CVE-2026-64894

Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

CVE-2026-64894

The Johnson Controls EasyIO Neo IOManager and Tools Installer (version 1.1.0.0 ) are vulnerable to an inclusion of functionality from untrusted control sphere vulnerability. This flaw allows for a Malicious Software Update . The vulnerability is associated with CWE-829 . No specific remediation s...

CVE-2026-64894: Johnson Controls EasyIO Neo IOManager and Tools Installer: Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and…

Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0...

CVE-2026-86109

The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures because the workflow does not restrict the digest algorithm used for artifact verification. An attacker with either sufficient privileges to upload packages to VeloCloud Orchestrator...

PT-2026-93263

Name of the Vulnerable Software and Affected Versions VeloCloud Edge affected versions not specified Description The software update workflow fails to properly validate signatures of update bundles because it does not restrict the digest algorithm used for artifact verification. A digest algorith...