474515 matches found
PT-2026-121550
Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set block.create options through volume update, copy, and move operations. Attackers can set the option on a custom volume and trigger a copy or move onto a formatting pool to inject...
Oracle Enterprise Manager Cloud Control 24.1 (October 2026 CPU)
The 24.1.0.0 version of Enterprise Manager Cloud Control installed on the remote host is affected by a vulnerability as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: API Gateway...
Debian dla-4850 : ata-modules-6.12.107+deb12-armmp-di - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4850 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4850-1 [email protected]...
PT-2026-121383
A cPanel PHP update fixes PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619, while WP Toolkit 6.11.5 patches CVE-2026-107663. cPanel PHP2Shell WPToolkit CVE2026109618 CVE2026109619 CVE2026107663 WebHosting CyberSecurity https://t.co/ikmFgnMsGV...
CVE-2025-56513-NiceHash-Update-Chain-Compromise
CVE-2025-56513 Critical Supply-Chain Vulnerability in NiceHash QuickMiner Update Mechanism Author: Prince T Philip Role: Independent Security Researcher Severity: CRITICAL — CVSS 9.8 Impact: Remote Code Execution / Supply-Chain Compromise Status: Publicly Disclosed & Assigned CVE-2025-56513...
CVE-2025-8110
CVE-2025-8110 — Gogs RCE PoC Silentium / HackTheBox Disclaimer: This tool is intended strictly for educational purposes and authorized penetration testing. Only use it against systems you have explicit permission to test. This is a modified version of zAbuQasem/gogs-CVE-2025-8110, adapted to work...
roller-csrf
Apache Roller v6.1.2 - Cross-Site Request Forgery CSRF in Profile Update Vulnerability Details Version : v6.1.2 Date : 2025-11-09 Exploit Author : Van Lam Nguyen Facebook : https://www.facebook.com/vanlam1412 Vendor Homepage : https://roller.apache.org Software Link :...
CLSA-2026-1792617972 TuxCare security update for vitest (1 CVE)
TuxCare rebuilt vitest to address 1 CVE. Fixed in 3.2.7-tuxcare.2...
CVE-2026-1880
CVE-2026-1880 https://github.com/user-attachments/assets/2602558f-abd8-4773-9094-64c32501dfed ASUS DriverHub Update TOCTOU LPE ASUS DriverHub Driver Update Process TOCTOU Vulnerability Leading to LPE Technical Resources Technical Presentation PDF 한국어.md | English.md Asus Hall of Fame Afterword...
CVE-2026-114438
A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution. When this action is ordered before the Configure OTP action in a realm, the system may fail to enforce mandatory multi-factor authentication enrollment during the login process. Thi...
Windows-Exploit-Suggester-Python3
Windows-Exploit-Suggester-Python3 python3 windows-exploit-suggester.py --update libreoffice --headless --convert-to xls 2021-07-15-mssb.xlsx python3 windows-exploit-suggester.py --database 2021-07-15-mssb.xls --systeminfo systeminfo.txt Example : so we should convert xlsx to xls...
crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages
A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...
CVE-2026-114438
The Keycloak identity and access management solution contains a flaw in the Update User Locale required action. If this action is ordered before the Configure OTP action within a realm, the system may fail to enforce mandatory multi-factor authentication enrollment during login. This allows an at...
CVE-2026-114438 Keycloak-services: keycloak-services: required otp enrollment bypassed via update user locale required action ordering
A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution. When this action is ordered before the Configure OTP action in a realm, the system may fail to enforce mandatory multi-factor authentication enrollment during the login process. Thi...
EUVD-2026-107540
A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution. When this action is ordered before the Configure OTP action in a realm, the system may fail to enforce mandatory multi-factor authentication enrollment during the login process. Thi...
CVE-2026-114438
A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution. When this action is ordered before the Configure OTP action in a realm, the system may fail to enforce mandatory multi-factor authentication enrollment during the login process. Thi...
crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages
A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...
agency-toolkit-1023-missing-authorization-to-unauthenticated-arbitrary-options-update
NoCVE Agency Toolkit = 1.0.23 - Missing Authorization to Unauthenticated Arbitrary Options Update Description The Agency Toolkit plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the...