krb5: kadmind: request alteration and protected information disclosure

In MIT krb5 release 1.4 and later, an active network attacker can alter the arguments sent by a legitimate client to RPC services protected by RPCSECGSS, or cause return values to be sent in plain text...

CVE-2026-126823

A local user with an ordinary account on the same host can place a file in a shared temporary location that the JDBC driver's native library loading routine will accept and load without verifying its origin. Loading the driver class in a Java application may then run code of that user's choosing...

krb5: kadmind: request alteration and protected information disclosure

In MIT krb5 release 1.4 and later, an active network attacker can alter the arguments sent by a legitimate client to RPC services protected by RPCSECGSS, or cause return values to be sent in plain text...

EUVD-2026-124574

The Elasticsearch data source resource proxy forwards the request method and path to Elasticsearch using the data source's own credentials, without restricting them to the operations the plugin needs. A user who can query the data source can alter index mappings or reach other indices on the...

krb5: kadmind: request alteration and protected information disclosure

In MIT krb5 release 1.4 and later, an active network attacker can alter the arguments sent by a legitimate client to RPC services protected by RPCSECGSS, or cause return values to be sent in plain text...

krb5: kadmind: request alteration and protected information disclosure

In MIT krb5 release 1.4 and later, an active network attacker can alter the arguments sent by a legitimate client to RPC services protected by RPCSECGSS, or cause return values to be sent in plain text...

MemITM

What's the MemITM tool? The MemITM Mem In The Middle tool has been developped in order to easily intercept "messages" in Windows processes memory. We developped a lot of custom memory interception tools in order to capture network messages before encryption, or IPC messages, and to be able to...

CVE-2021-42574

Trojan Source:Invisible Vulnerabilities - Code generator — In simple terms, the vulnerability is that the code looks different from what it will be when compiled : The attack consists of using embedded control characters in comments and strings to reorder source code characters in a way that...

PT-2026-146070

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A local user with an ordinary account on the same host can place a file in a shared temporary location. The JDBC driver's native library loading routine may acce...

PT-2026-145892

The Elasticsearch data source resource proxy forwards the request method and path to Elasticsearch using the data source's own credentials, without restricting them to the operations the plugin needs. A user who can query the data source can alter index mappings or reach other indices on the...

toxy

toxy Not actively maintained, may not work with latest node.js runtimes. If you are interested in maintaining toxy, please open an issue. Hackable HTTP proxy to simulate server failure scenarios , systems resiliency testing and unexpected network conditions , built for node.js. It was mainly...

Linux Distros Unpatched Vulnerability : CVE-2026-118380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - krb5: kadmind: request alteration and protected information disclosure CVE-2026-118380 Note that Nessus relies on the presence of the package as reported by the...

CVE-2026-123540

OpenAM versions prior to 16.1.4 are vulnerable to an incomplete output encoding flaw in SAML 1.x Form POST. This vulnerability allows a trusted identity provider to inject unencoded content into a service provider's auto-submitted form, enabling the modification of assertion attribute names or va...

CVE-2026-123540 OpenAM before 16.1.4 Incomplete Attribute Encoding in SAML 1.x Form POST

OpenAM before 16.1.4 contains an incomplete output encoding vulnerability that allows a SAML 1.x identity provider to alter attribute values by injecting unencoded content into the service provider auto-submitted form. Attackers controlling a trusted identity provider can craft assertion attribut...

CVE-2026-117588

The WP Google Review Slider WordPress plugin before 18.11 does not perform nonce validation when updating its active Google Places configuration, allowing attackers to alter or destroy that configuration via a forged request, provided they can trick a site administrator into following a crafted...

EUVD-2026-118933

The WP Google Review Slider WordPress plugin before 18.11 does not perform nonce validation when updating its active Google Places configuration, allowing attackers to alter or destroy that configuration via a forged request, provided they can trick a site administrator into following a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-119417

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 contain an email header injection vulnerability because...

CVE-2026-121506

A flaw was found in NTPsec. An out-of-bounds memory read and write issue in the Network Time Security NTS client extension field parsing allows a remote attacker capable of sending server responses to trigger heap memory corruption. By supplying a crafted NTS extension field with an excessive non...

Google Chrome Microsoft Edge UI Alteration

The vulnerability in the UI components of Google Chrome and Microsoft Edge is related to errors in how user interface information is presented. Exploitation of this vulnerability enables a remote attacker to manipulate the interface by using a specially crafted HTML page...

CVE-2026-118581

A flaw was found in the MongoDB Java Driver. The BSON Binary JSON encoding component fails to verify that an externally supplied raw document's declared length matches its actual byte range before copying it into an outgoing database command. A remote attacker can exploit this flaw by submitting...