kyocera-cve-2022-1026

kyocera-cve-2022-1026 Une vulnérabilité d'extraction de données non authentifiée dans les imprimantes Kyocera, qui permet la récupération en clair du carnet d'adresses et des mots de passe de domaine. Aperçu de la vulnérabilité En 2021, lors d'un test d'intrusion, je bidouillais l'application...

CVE-2025-63579

CVE-2025-63579 Accès non autorisé à tous les noms d'utilisateur et mots de passe saisis dans la fonctionnalité Carnet d'adresses présente sur les imprimantes Kyocera Command Center RX. Description L'utilisation non autorisée des imprimantes Kyocera permet d'exporter toutes les informations stocké...

CVE-2026-63563

CVE-2026-63563 - Modification non authentifiée du carnet d'adresses sur les imprimantes multifonctions Sharp MX/BP Avis du fabricant : Sharp Product Security Advisory 2026-004 publié le 31 juillet 2026 Résumé Les imprimantes multifonctions des séries Sharp MX/BP exposent le carnet d'adresses via...

ios-gamed-0day

Exploit iOS gamed corrigé dans 15.0.2 Mise à jour : Apple a discrètement corrigé ce problème dans iOS 15.0.2 sans aucune reconnaissance publique ni crédit. Toute application installée depuis l'App Store peut accéder aux données suivantes sans aucune invite de l'utilisateur : L'adresse e-mail de...

kyocera-cve-2022-1026_SOAP1.1

Kyocera cve-2022-1026 soap1.1 Test autorisé uniquement. Ce projet est fourni à des fins éducatives et de validation défensive dans des environnements que vous possédez ou pour lesquels vous avez une autorisation explicite de tester. Ne l'utilisez pas contre des systèmes que vous ne possédez pas o...

CVE-2023-49367

CVE-2023-49367 - Exposition de données Sensetive Exposition de données Sensetive dans le panneau Web de l'imprimante Kyocera Fournisseur : Kyocera Corporation Versions concernées : Command Center RX - EXOSYS M5521cdn Description Après connexion au carnet d'adresses de l'interface Kyocera, des...

kygocera

kygocera CVE-2022-1026 Улучшенная Golang-версия PoC от Rapid7 для CVE-2022-1026 https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ благодарности Aaron Herndon / https://twitter.com/ac3lives приветы https://github.com/D4RKMATT3R CVE-2022-1026 установк...

KyoceraCredsDump

KyoceraCredsDump - CVE-2022-1026 Basé sur l'exploit original d'Aaron Herndon, @ac3lives Rapid7 - https://www.rapid7.com/blog/post/2022/03/29/cve-2022-1026-kyocera-net-view-address-book-exposure/ crédits à Aaron Herndon / https://twitter.com/ac3lives /...

CVE-2025-1015

CVE-2025-1015 : Le carnet d'adresses de Thunderbird contient des champs URI non assainis pouvant être exploités par des attaquants. En créant un carnet d'adresses avec des liens malveillants, un attaquant peut inciter un autre utilisateur à importer le carnet d'adresses compromis. Si l'utilisateu...

CVE-2026-86039

libp2p is a JavaScript implementation of the libp2p networking stack. From 8.0.0 until 12.0.24, @libp2p/peer-store in packages/peer-store/src/index.ts uses consumePeerRecord to verify a RecordEnvelope signature but does not require PeerRecord.peerId in the signed payload to equal the signer peer ...

CVE-2026-86039

CVE-2026-86039 affects @libp2p/peer-store (part of the JavaScript libp2p networking stack) from versions 8.0.0 through 12.0.24 . The root cause is in consumePeerRecord, which verifies a RecordEnvelope signature but fails to require that PeerRecord.peerId in the signed payload matches the signer p...

CVE-2026-86039 libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses

libp2p is a JavaScript implementation of the libp2p networking stack. From 8.0.0 until 12.0.24, @libp2p/peer-store in packages/peer-store/src/index.ts uses consumePeerRecord to verify a RecordEnvelope signature but does not require PeerRecord.peerId in the signed payload to equal the signer peer ...

CVE-2026-86039 libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses

libp2p is a JavaScript implementation of the libp2p networking stack. From 8.0.0 until 12.0.24, @libp2p/peer-store in packages/peer-store/src/index.ts uses consumePeerRecord to verify a RecordEnvelope signature but does not require PeerRecord.peerId in the signed payload to equal the signer peer ...

CVE-2026-86039 libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses

libp2p is a JavaScript implementation of the libp2p networking stack. From 8.0.0 until 12.0.24, @libp2p/peer-store in packages/peer-store/src/index.ts uses consumePeerRecord to verify a RecordEnvelope signature but does not require PeerRecord.peerId in the signed payload to equal the signer peer ...

PT-2026-94370

Name of the Vulnerable Software and Affected Versions @libp2p/peer-store versions 8.0.0 through 12.0.23 Description In the @libp2p/peer-store component, the consumePeerRecord function verifies a RecordEnvelope signature but fails to ensure that the PeerRecord.peerId within the signed payload...

CVE-2026-52829

An unauthenticated remote peer can deterministically crash any synced zebrad node (v4.4.1 and earlier) on the default Linux dual-stack listener by completing a P2P handshake and advertising an invalid mempool transaction; the crash fires after the 30-second misbehavior batch flush due to an IPv4-...

CVE-2026-52829 ZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address Book

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an unauthenticated IPv4 peer can deterministically terminate a synced Zebra node using the default Linux dual-stack listener configuration. The handshake path canonicalized an IPv4-mapped IPv6 PeerSocketAddr such as ::ffff:127.0.0.1 ...

SUSE CVE-2026-74999

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS...

Linux Distros Unpatched Vulnerability : CVE-2026-74999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the Add to address book action was subject to stored XSS. CVE-2026-74999 Note that Nessus relies on t...

CVE-2026-74999

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the "Add to address book" action was subject to stored XSS...