PT-2026-106241

Name of the Vulnerable Software and Affected Versions AMD Zynq™ UltraScale+ MPSoC affected versions not specified AMD RFSoC affected versions not specified Description Insufficient boundary validation in the USB boot mode implementation allows unbounded Device Firmware Upgrade DFU download reques...

ROS-20261005-73-0092

The vulnerability in dotnet10.0 is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

ROS-20261005-73-0101

The vulnerability in dotnet10.0 is related to a lack of source verification mechanism. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

ROS-20261005-73-0030

The vulnerability in rsync is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20261005-73-0005

The vulnerability in rsync relates to incorrect restrictions on the path to the restricted access catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Cryptanalysis of a Class of Ideal Secret Sharing Schemes Based on the CRT for Polynomial Rings

Based on the CRT for polynomial rings, Yang, Zhu, Fu and Xia ISIT 2026 proposed a compartmented secret sharing scheme for the compartmented access structure with lower bounds, claiming it can be ideal. We exhibit three families of unauthorized subsets that reconstruct the secret. The scheme is...

PT-2026-106200

Name of the Vulnerable Software and Affected Versions Ghost versions 5.9.0 through 6.44.0 Description An input validation issue in this Node.js content management system allows members to access comments for which they lack proper authorization. Recommendations Update to version 6.44.1...

ROS-20261005-73-0099

The vulnerability in dotnet9.0 is related to a lack of source verification mechanism. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2026-71299: Missing Authentication for Critical Function

A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This allows a remote attacker to perform unauthorized write operations, such as creating, modifying, or deleting consumers and resource bundles. This could lead to data integrity...

CVE-2026-105681: Improper Neutralization of Special Elements in Data Query Logic

Ghost is a Node.js content management system. From 5.9.0 until 6.44.1, an input validation issue allowed members to access comments they were not authorized to access. This issue is fixed in version 6.44.1...

The vulnerability of the XRDP server, related to inconsistencies in response to incoming requests, allows attackers to gain unauthorized access to protected information.

The vulnerability of the XRDP server is related to inconsistencies in the responses to incoming requests. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the MariaDB database management system, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of the MariaDB database management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Podman software for managing and starting OCI containers lies in the insufficient protection of operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Podman software for managing and starting OCI containers is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the GlancesXMLRPCCHandler() and GlancesXMLRPCServer() classes in the glances/server.py file of the Glances monitoring tool’s application programming interface allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the GlancesXMLRPCHandler and GlancesXMLRPCServer methods in the glances/server.py file of the Glances monitoring tool’s application programming interface is related to a deficiency in the source verification mechanism. Exploiting this vulnerability could allow an attacker to...

CVE-2026-59357 - Self-UAA OIDC Configuration allows JWT injection to establish unauthorized sessions | Cloud Foundry

Severity High CVSS score: 7.2 High CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P Vendor Cloud Foundry Foundation Versions Affected Severity is High unless otherwise noted. UAA – Confirmed in UAA v4.5.0 to v79.6.0 inclusive Description Insufficient verification of data...

PT-2026-106191

A flaw was found in Maestro. Its REST API write endpoints were registered without proper authentication middleware. This allows a remote attacker to perform unauthorized write operations, such as creating, modifying, or deleting consumers and resource bundles. This could lead to data integrity...

CVE-2025-55182

🛡️ CVE-2025-55182 - Understand and Mitigate a Vulnerability 🚀 Getting Started Welcome to the CVE-2025-55182 project. This guide will help you understand the vulnerability and provide steps to download and run the software you need. 📥 Download the Application 🔍 What is CVE-2025-55182? CVE-2025-5518...

CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN

CVE-2026-0073 — Android ADBD TLS Authentication Bypass EVPPKEYcmp Type Confusion → Unauthorized ADB Shell 🔥 Overview A critical authentication bypass vulnerability exists in Android's ADB daemon adbd that allows any attacker on the local network to obtain full shell access on a target device...

CVE-2020-2969

CVE-2020-2969 The PoC for CVE-2020-2969 is documented here: https://packetstormsecurity.com/files/179027/Oracle-Database-Password-Hash-Unauthorized-Access.html...

CVE-2024-0044

CVE-2024-0044 Overview CVE-2024-0044 is a vulnerability discovered in certain Android applications that allows attackers to escalate privileges by exploiting a flaw in the run-as command. This vulnerability can be exploited by crafting a specific payload that grants unauthorized access to...