CVE-2026-17038

creationtimestamp| type| source ---|---|--- 2026-09-10 12:15:12+00:00| seen| https://cert.pl/en/posts/2026/09/CVE-2026-17038...

CLEANSTART-2026-HR50080 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

Multiple security vulnerabilities affect the cert-manager package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

CVE-2026-0073-Android-ADBD-bypass-POC

CVE-2026-0073 — Android ADBD TLS Auth Bypass EVPPKEYcmp type confusion → unauthorized ADB shell 🔥 Overview A critical authentication bypass in Android's ADB daemon adbd allows any attacker on the local network to obtain a full shell on a target device without user authorization. The vulnerability...

CVE-2017-16744-and-CVE-2017-16748-Tridium-Niagara

PoC para CVE-2017-16744 y CVE-2017-16748 Prueba de concepto PoC CVE: 2017-16744 y 2017-16748 Fecha: 09/09/2019 Autor del exploit: GainSec - Jon Gaines Página web del proveedor: https://www.tridium.com/ Versión: Afecta a Tridium Niagara AX Versiones: 3.8 y anteriores, así como Niagara 4 Versiones:...

CVE-2026-86853

creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:23+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86853 2026-09-09 13:50:18+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mv3okv6hgh2l...

CVE-2026-86737

creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86737...

CVE-2026-86734

creationtimestamp| type| source ---|---|--- 2026-09-08 20:15:02+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86734...

CVE-2026-86733

creationtimestamp| type| source ---|---|--- 2026-09-08 17:46:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2klradhbvva6i 2026-09-08 20:15:09+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86733 2026-09-11 05:00:06+00:00| seen|...

CVE-2026-86732

creationtimestamp| type| source ---|---|--- 2026-09-08 17:01:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muzirvtrwu2o 2026-09-08 17:52:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a3rrx67pj2usq 2026-09-08 20:15:07+00:00| seen|...

IIITA-IoT-Security-Research

IIIT Allahabad – IoT Security Research Internship Overview This repository showcases the work carried out during my Research Internship at the Indian Institute of Information Technology, Allahabad IIIT Allahabad under the Cryptography and Network Security CNS Lab. During this internship, I worked...

IRM

IRM-2022 인시던트 대응 방법론 2022 CERT Societe Generale은 CERT aDvens와 협력하여 사용하기 쉬운 실무형 인시던트 모범 사례를 제공합니다. 이 치트 시트는 인시던트 처리에 전념하며 CERT 팀이 관여할 수 있는 여러 분야를 다룹니다. 저희가 흔히 다루는 각 보안 인시던트에 대해 하나의 IRM이 존재합니다. CERT Societe Generale은 일부 IRM에 주요 영감의 원천이 되어 주신 SANS와 Lenny Zeltser에게 감사의 말씀을 전합니다. 또한 협업과 프랑스어 번역에 기여해 주...

globalprotect-ca-cert-ipc

c2us.exe - Launches a command as the running user in the desktop session of the logged on user. In thise case, launches cmd.exe as SYSTEM in the desktop session of the unprivileged user. c2us.c - Source code for c2us.exe. epinject.exe - Entry point injector, used to spawn a new process and inject...

pwnage24mtk

pwnage24mtk Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696. May be patched at June Disclaimer This project is only used for researching. Make sure you get authorized before you use it. Not allowed for illegal use. It is not allowed to...

CERTFR-2026-ACT-038

creationtimestamp| type| source ---|---|--- 2026-09-07 13:16:34+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3muwlqpl73d2v 2026-09-07 13:16:41+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/117229944394912620...

CVE-2026-86267

creationtimestamp| type| source ---|---|--- 2026-09-07 08:15:12+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86267...

CVE-2026-86265

creationtimestamp| type| source ---|---|--- 2026-09-07 08:15:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86265...

CVE-2026-86268

creationtimestamp| type| source ---|---|--- 2026-09-07 05:47:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2zui7f45fntkc 2026-09-07 08:15:10+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86268...

CVE-2026-86269

creationtimestamp| type| source ---|---|--- 2026-09-07 05:41:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2ry6clra3wtkl 2026-09-07 08:15:07+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-86269...

EUVD-2026-72168

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

CGA-V88X-7PMW-QG5P

Bulletin has no description...