pwnage24mtk

pwnage24mtk Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696. Patched. CVE-2023-20696 CVE-2025-20730 There are some issues about architecture detect.Need to be fixed when I am free.Or anyone can make a pull request. This is a vibe-coded...

pwnage24mtk

pwnage24mtk Exploit de certificat pour les appareils MTK. Il existe une faille logique dans le processus de vérification des certificats MTK. Similaire à CVE-2023-20696. Peut être corrigé en juin. Avertissement Ce projet est uniquement utilisé pour la recherche. Assurez-vous d'obtenir une...

Important: bouncycastle

Issue Overview: In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent cross-nonce AEAD forgery. This issue also affects Bouncy Castle for Java LTS before 2.73.12. CVE-2026-12803 In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets...

Amazon Linux 2023 : bouncycastle, bouncycastle-javadoc, bouncycastle-mail (ALAS2023-2026-2153)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2153 advisory. In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bind nonce when AAD is absent cross- nonce AEAD forgery. This issue also affects Bouncy Castle for Java LTS before 2.73.12...

EulerOS 2.0 SP12 : shim (EulerOS-SA-2026-3386)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact summary...

EulerOS 2.0 SP12 : shim (EulerOS-SA-2026-3311)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact summary:...

DoS (Denial of Service) Apache Tomcat Dependency in Jira Service Management Data Center and Server

This High severity DoS Denial of Service vulnerability known as CVE-2026-13506 was introduced in 10.0.0 and later of Jira Service Management Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

DoS (Denial of Service) Apache Tomcat Dependency in Jira Software Data Center and Server

This High severity DoS Denial of Service vulnerability known as CVE-2026-13506 was introduced in 10.0.0 and later of Jira Software Data Center and Server. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

DoS (Denial of Service) at org.bouncycastle:bcprov-jdk18on in Crucible Server

This High severity DoS Denial of Service vulnerability known as CVE-2026-13506 was introduced in 4.9.0 and later of Crucible. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

CVE-2026-13506

A flaw was found in Bouncy Castle for Java. A remote attacker could exploit a vulnerability related to how the software processes lazy ASN.1 sequences, which can reset an internal nesting-depth guard. This issue could lead to a Denial of Service DoS, making the affected system or application...

EUVD-2026-66459

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

CVE-2026-80544

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

UBUNTU-CVE-2026-80544

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

CVE-2026-80544

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

CVE-2026-80544 s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

CVE-2026-80544

CVE-2026-80544 affects the Linux kernel s390/zcrypt subsystem, specifically the zcrypt_msgtype6_send_ep11_cprb() function. The vulnerability arises from fragile struct overlays used to read and modify the domain field in the EP11 CPRB payload, which assume a fixed structure without validating the...

CVE-2026-80544 s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing The zcryptmsgtype6sendep11cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload, creating maintainability and...

PT-2026-82160

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The zcrypt msgtype6 send ep11 cprb function uses fragile struct overlays to access and modify the domain field in the EP11 CPRB payload. This approach assumes a fixed payload structure a...