CVE-2026-101619

A flaw was found in the InnoDB component of MySQL. A high-privileged attacker with network access could exploit this vulnerability to trigger an unexpected hang or crash of the database server. A successful attack can result in a complete Denial of Service DoS...

CVE-2026-92450 Kiloview E3 NDI Encoder Use of Hard-coded Credentials

The authentication framework used by affected Kiloview E3 NDI encoder firmware signs session JSON Web Tokens using an HMAC-SHA256 secret hardcoded as a static string within the firmware image, identical across all deployed devices. An attacker with access to the publicly distributed firmware can...

CVE-2026-92450

The Kiloview E3 NDI encoder firmware is vulnerable to a use of hard-coded credentials (CWE-798) within its authentication framework. The system signs session JSON Web Tokens using an HMAC-SHA256 secret that is hardcoded as a static string identical across all devices. An attacker who obtains the ...

TryHack3M-Bricks-Heist

TryHack3M: Bricks Heist Exploit • Writeup • CTF Challenge A comprehensive repository containing a custom exploit and detailed writeup for the TryHack3M: Bricks Heist challenge Quick Start • Repository Structure • The Exploit • The Writeup • Disclaimer Overview This repository documents the...

qemu-kvm: qemu-guest-agent: Local privilege escalation via symlink attack in guest-ssh-add-authorized-keys

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

CVE-2026-114618 Authlib: Default JWT bearer grant accepts assertions for the wrong audience

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.getaudiences returns an empty list, causing JWTBearerGrant.verifyclaims to require only that an aud claim exists without matching the current authorization server. An...

CVE-2026-114618

The Authlib Python library (prior to version 1.9.0 ) is vulnerable due to an insecure default in the RFC 7523 JWTBearerGrant.get_audiences() method. Because this method returns an empty list by default, JWTBearerGrant.verify_claims() only requires the presence of an aud claim without verifying it...

CVE-2026-114618 Authlib: Default JWT bearer grant accepts assertions for the wrong audience

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.getaudiences returns an empty list, causing JWTBearerGrant.verifyclaims to require only that an aud claim exists without matching the current authorization server. An...

CVE-2026-114618

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.getaudiences returns an empty list, causing JWTBearerGrant.verifyclaims to require only that an aud claim exists without matching the current authorization server. An...

CVE-2026-114618

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, the default RFC 7523 JWTBearerGrant.getaudiences returns an empty list, causing JWTBearerGrant.verifyclaims to require only that an aud claim exists without matching the current authorization server. An...

CVE-2026-101777

A flaw was found in the MySQL security encryption component. A remote attacker with high privileges can exploit this vulnerability over network protocols to cause the service to hang or crash repeatedly, resulting in a complete Denial of Service DoS. Additionally, successful exploitation can allo...

CVE-2026-101513

A flaw was found in the InnoDB component of MySQL. An attacker with physical access and high privileges can exploit this vulnerability to cause the system to hang or crash repeatedly. Successful exploitation results in a complete Denial of Service DoS of the database cluster...

CVE-2026-114732

A flaw was found in Roundcube Webmail. In multi-host installations, user authentication using an alias address does not restrict account lookup to the specific Internet Message Access Protocol IMAP host. A remote authenticated user could exploit this flaw to gain unauthorized access to another...

CVE-2026-90458

A path traversal vulnerability was found in OpenStack Ironic Redfish vendor passthrough subscription management. An authenticated attacker with vendor passthrough privileges could use a crafted subscription id to access or delete arbitrary Redfish resources on a node's BMC. Mitigation There is no...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the access control evaluation process. An attacker can gain unauthorized access to restricted paths by crafting identity metadata containing wildcard or path segments, which causes explicit deny rules to be...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the access control evaluation process. An attacker can gain unauthorized access to restricted paths by crafting identity metadata containing wildcard or path segments, which causes explicit deny rules to be...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the access control evaluation process. An attacker can gain unauthorized access to restricted paths by crafting identity metadata containing wildcard or path segments, which causes explicit deny rules to be...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the access control evaluation process. An attacker can gain unauthorized access to restricted paths by crafting identity metadata containing wildcard or path segments, which causes explicit deny rules to be...

Insufficient Session Expiration

Overview Affected versions of this package are vulnerable to Insufficient Session Expiration due to improper expiration checks in the AppRole authentication process. An attacker can gain unauthorized access by using an expired Secret ID that has not yet been removed by the periodic tidy operation...

Incorrect Authorization

Overview github.com/openbao/openbao/v2/internal/vault/policy is a None Affected versions of this package are vulnerable to Incorrect Authorization. via the policy cache authorization process. An attacker can gain unauthorized access to capabilities in other namespaces, including the root namespac...