EUVD-2026-101338

An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing-plane denial of service via Auto-RP mapping announcements received when Auto-RP mapping is enabled...

CVE-2026-102017

An Out-of-bounds Write vulnerability exists in the rpd process of Juniper Networks Junos OS and Junos OS Evolved . This flaw allows an unauthenticated attacker to trigger a routing-plane denial of service by sending Auto-RP mapping announcements when Auto-RP mapping is enabled. No specific exploi...

CVE-2026-73130

Gitea does not limit the length of the gitignores field accepted by repository-creation forms and the API. Repository initialization splits the field into template names, repeatedly reads the referenced templates, and buffers their contents in memory. An attacker who can create repositories can...

auto client cert connection reuse mixup

libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option...

CVE-2026-102017: Out-of-bounds Write

An Out-of-bounds Write vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker to cause a routing-plane denial of service via Auto-RP mapping announcements received when Auto-RP mapping is enabled...

CVE-2026-110206

Roo-Code versions up to and including 3.54.0 are vulnerable to a command approval bypass in the parseCommandLine() function. The root cause is an interpretation conflict where attackers can use command substitution at the command position to bypass the software's allowlist. By using indirect prom...

CVE-2026-110205

Roo-Code versions through 3.54.0 are vulnerable to a command approval bypass in the parseCommandLine() function. The flaw occurs because the system discards command substitutions when they are placed adjacent to ＊ or ！ (glob characters). An attacker leveraging indirect prompt injection can craft ...

CVE-2026-109195

A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other namespaces, leading to unauthorized information disclosure. This issue occurs because the application does not properly enforce namespace scoping when retrieving policy details by...

CVE-2026-109195

A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other namespaces, leading to unauthorized information disclosure. This issue occurs because the application does not properly enforce namespace scoping when retrieving policy details by...

CVE-2026-109195

A flaw in Quay allows an authenticated attacker to perform an Insecure Direct Object Reference (IDOR) to access repository auto-prune configurations from other namespaces. The root cause is a failure to properly enforce namespace scoping when retrieving policy details using a repository name and ...

CVE-2026-109195 Quay: repository auto-prune policy uuid idor in quay api

A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other namespaces, leading to unauthorized information disclosure. This issue occurs because the application does not properly enforce namespace scoping when retrieving policy details by...

EUVD-2026-97499

A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other namespaces, leading to unauthorized information disclosure. This issue occurs because the application does not properly enforce namespace scoping when retrieving policy details by...

CVE-2026-109195: Authorization Bypass Through User-Controlled Key

A flaw was found in Quay. An authenticated attacker can access repository auto-prune configurations from other namespaces, leading to unauthorized information disclosure. This issue occurs because the application does not properly enforce namespace scoping when retrieving policy details by...

harbian-audit

Endurecimiento de harbian-audit Introducción Auditoría de distribuciones endurecidas Debian GNU/Linux y CentOS 8. El entorno de prueba principal es Debian GNU/Linux 9/10/11/12/13, CentOS 8 y Ubuntu 22. Otras versiones no han sido completamente probadas. No hay implementaciones de elementos...

auto_re

AutoRE Funcionalidades 1. Renombrado automático de funciones con nombres ficticios, que tienen una llamada API o salto a la API importada Antes Después 2. Asignación de TAGS a las funciones según los indicadores de API llamados en su interior Establece los tags como comentarios de función...

toolkit

English | English Indetectables Toolkit Diseñado como una navaja suiza, este conjunto de herramientas es invaluable para analistas de malware, crackers y expertos en ciberseguridad. Está meticulosamente elaborado para apoyar tanto a usuarios novatos como experimentados. Es el complemento perfecto...

CVE-2026-88785

The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN acce...

CVE-2026-88785

The Simple Membership WordPress plugin, in versions before 4.8.3 , is vulnerable to credential exposure. When the optional auto-login-after-registration feature is enabled, the plugin transmits a newly registered member's plaintext password within a URL query string . This exposure allows anyone ...

EUVD-2026-96773

The Simple Membership WordPress plugin before 4.8.3 does not avoid transmitting a newly registered member's plaintext password in a URL query string when an optional auto-login-after-registration feature is enabled, exposing the credential in browser history and in web server, proxy, and CDN acce...

sharesniffer

sharesniffer sharesniffer es una herramienta de análisis de red para encontrar recursos compartidos de archivos abiertos y cerrados en tu red local. Incluye descubrimiento automático de red y montaje automático de cualquier recurso compartido cifs y nfs abierto. Cómo usar Ejemplo para encontrar...