dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-20230-Scanner

CVE-2026-20230 स्कैनर CVE-2026-20230 से प्रभावित संभावित रूप से कमजोर Cisco Unified Communications Manager Unified CM परिनियोजनों की पहचान करने के लिए एक Python-आधारित स्कैनर और सत्यापन उपकरण। विशेषताएँ Cisco Unified CM इंस्टेंस का पता लगाता है WebDialer एक्सपोज़र की जाँच करता है एकल-लक्ष्य और बल...

NPM: i18next-http-backend incomplete URL validation permits SSRF

NPM: i18next-http-backend incomplete URL validation permits SSRF vulnerability discovered by ? in WordPress Npm i18next-http-backend versions 4.0.2...

GHSA-XVQ9-WJP8-HWQF i18next-http-backend incomplete URL validation permits SSRF

There is an SSRF vulnerability when using i18next-http-backend. A colon in an attacker-controlled language value can make a custom path template request an unintended origin. This is reachable under the following conditions: Attacker controls i18next language or namespace input that is interpolat...

cve-2026-75650-magento-validation-lab

CVE-2026-75650 / VULN-39341 Docker validation lab This standalone lab reproduces the complete unauthenticated StyleSmuggler HTTP chain on a revision-pinned Magento Open Source 2.4.9 checkout. It then applies Adobe's VULN-39341 patch and proves that the identical request sequence no longer reaches...

EUVD-2026-93458

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...

CVE-2026-67270

Dell Container Storage Modules CSM versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend...

CVE-2026-67270

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are affected by an Improper Certificate Validation vulnerability within the proxy-server component. An unauthenticated attacker located on an adjacent network could exploit this flaw to cause information exposure of storage backend adm...

CVE-2026-34498

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394...

CVE-2026-11784-Optimole-CSRF

CVE-2026-11784: CSRF para Sobrescrita Arbitrária de Arquivos no Plugin Optimole WordPress Resumo Uma vulnerabilidade de Cross-Site Request Forgery CSRF no plugin Optimole para WordPress versões = 4.2.5 permite que atacantes não autenticados sobrescrevam silenciosamente ativos existentes da...

CVE-2026-105794

MsQuic , a cross-platform C implementation of the IETF QUIC protocol, contains an improper certificate validation vulnerability (CWE-295) in versions prior to 2.4.20, 2.5.11, and 2.6.1 . When using the OpenSSL or QuicTLS TLS backends, the software fails to verify that a server certificate matches...

CVE-2026-105794 MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL

MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certificate matches the intended target server hostname. An on-pat...

CVE-2026-105794 MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL

MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certificate matches the intended target server hostname. An on-pat...

llm-council-vapt

LLM Council — Validação de Achados de VAPT Um pipeline de revisão cega por pares que valida um achado de teste de penetração antes que ele chegue a um cliente. Lentes de especialistas independentes avaliam o achado, revisam-se cegamente entre si, e um Chairman sintetiza um veredito verificado —...

EUVD-2026-93398

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394...

CVE-2026-34498 L4L

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394...

CVE-2026-34498

An improper input validation vulnerability exists in Johnson Controls Illustra Standard - L4L China on Windows platforms. This flaw allows for OS Command Injection , specifically affecting versions before 6.0.0.66394 . The documents do not provide specific technical details regarding the vulnerab...

Camera-Dahua-Research-l-h-ng-CVE-2021-33044

Simulação de exploração do Dahua Authentication Bypass PoC CVE-2021-33044 Visão geral As câmeras IP Dahua são dispositivos IoT amplamente utilizados em sistemas de vigilância de segurança. Por serem frequentemente implantadas em redes internas ou acessadas pela Internet, as vulnerabilidades de...

CVE-2025-58440

CVE-2025-58440 Execução Remota de Código RCE via Ataque de Arquivo Poliglota e Injeção de Byte Nulo no Laravel FileManager Visão Geral O pacote unisharp/laravel-filemanager versões 2.11 são vulneráveis a Execução Remota de Código RCE devido à validação inadequada de tipo de arquivo durante upload...

CVE-2026-5562-Exploit

Exploit CVE-2026-5562 Aviso Este repositório contém um script de pesquisa de prova de conceito para validar exposição em um ambiente controlado. É apenas para fins de pesquisa e educação, não deve ser usado contra sistemas de produção nos quais você não possui autorização. Instalar requisitos...