AZL-105609 CVE-2026-75806 affecting package openvmm 0.1.0-1

Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is rout...

CVE-2026-75806

Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is rout...

CVE-2026-75806

A flaw in OpenSSL allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by terminating an active DTLS 1.2 session using an AEAD cipher suite. The vulnerability arises because the record layer fails to validate that a record is long enough to contain the mandatory explicit I...

CVE-2026-75806 Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS

Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is rout...

EUVD-2026-89011

Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is rout...

CVE-2026-82804

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

CVE-2026-82804 Apache DolphinScheduler: Command Injection in the Alert Script Plugin

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

EUVD-2026-88812

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

CVE-2026-82804 Apache DolphinScheduler: Command Injection in the Alert Script Plugin

The scriptPath parameter is incorporated into a /bin/sh -c command without sufficient neutralization of shell metacharacters, allowing shell command substitution and execution. An authenticated user can exploit this behavior by creating a resource whose filename contains shell command substitutio...

CVE-2026-82804

The Apache DolphinScheduler (versions before 3.4.3 ) is vulnerable to command injection in the Alert Script plugin . The root cause is the incorporation of the scriptPath parameter into a /bin/sh -c command without sufficient neutralization of shell metacharacters. An authenticated user can explo...

CVE-2026-11387

CVE-2026-11387 — SMS Alert ≤ 3.9.5 ☆ 未认证权限提升 — 通过任意密码重置 ☆ === Beelze === 📋 漏洞信息 字段| 详情 ---|--- CVE ID| CVE-2026-11387 CVSS 评分| 9.8 严重 CVSS 向量| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 类型| 缺少身份验证 / OTP 绕过 插件| SMS Alert – WooCommerce OTP 验证 sms-alert 受影响版本| ≤ 3.9.5 修复版本| 3.9.6 发布年份| 2026 PoC 作者...

PT-2026-102801

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Command injection is possible within the SNMP alert notification functionality. An authenticated attacker capable of influencing policy alert text can execute arbitrary operating system...

PT-2026-102656

Name of the Vulnerable Software and Affected Versions affected versions not specified Description An issue exists in the handling of DTLS 1.2 associations using an AEAD Authenticated Encryption with Associated Data cipher suite. An attacker can terminate an established association by sending a...

Linux Distros Unpatched Vulnerability : CVE-2026-75806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is...

CVE-2026-75806: Improper Validation of Specified Quantity in Input

Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is rout...

CVE-2026-84440: Improper Neutralization of Special Elements used in an OS Command

IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs...

CVE-2024-3094-checker

CVE-2024-3094 检测与修复脚本 此脚本旨在检测并修复影响 XZ Utils 数据压缩库的关键漏洞 CVE-2024-3094。该漏洞已在 CISA 警报中重点提及，对系统安全具有重大影响。此 Bash 脚本同时提供检测与修复功能。 免责声明 本脚本按“AS IS”提供，不附带任何形式的保证。它尚未在所有环境和配置下进行彻底测试。运行此脚本即表示您知悉并接受自行承担风险。 使用方法 克隆仓库： git clone https://github.com/hazemkya/CVE-2024-3094-checker.git cd CVE-2024-3094-checker...

CVE-2026-101085

Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger unrecovered panics in the alert evaluator goroutine. Attackers can submit a crafted alert rule via the POST /api/v1/alert-rule endpoint t...

CVE-2026-101085 Nezha before 2.3.8 Denial of Service via Alert Rule

Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger unrecovered panics in the alert evaluator goroutine. Attackers can submit a crafted alert rule via the POST /api/v1/alert-rule endpoint t...

EUVD-2026-88020

Nezha before 2.3.8 fails to validate alert rule type and duration bounds, allowing authenticated non-administrator users to create malformed rules that trigger unrecovered panics in the alert evaluator goroutine. Attackers can submit a crafted alert rule via the POST /api/v1/alert-rule endpoint t...