The vulnerability of the software for the training and control system “OLIMPOX” arises from insufficient restrictions on authentication attempts, allowing a perpetrator to circumvent existing security restrictions.

The vulnerability of the “OLIMPOX” training and control system’s software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

droidbox

Introducción DroidBox ha sido desarrollado para ofrecer análisis dinámico de aplicaciones Android. La siguiente información se describe en los resultados, generados cuando el análisis está completo: Hashes del paquete analizado Datos de red entrantes/salientes Operaciones de lectura y escritura d...

CVE-2023-27350

CVE-2023-27350 The tool is designed specifically for Massive Authentication Bypass Papecut MF/NG, which refers to a process of circumventing or bypassing authentication mechanisms on a large scale. Screenshot Requirements Python3.7+ Supported Os Linuxer Wingays Get start with $ git clone...

The vulnerability of the Xvnc process of the XRDP server allows attackers to circumvent security restrictions.

The vulnerability of the Xvnc process of the XRDP server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

ROS-20261005-73-0033

The vulnerability of the Rsync file transfer and synchronization utility is related to the incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...

CVE-2026-103012

A flaw was found in claude-code. When retrieving server-managed settings, the application prioritized a locally stored credential over an active organizational account sign-in. If the configuration server rejected the stored credential, a local user could initiate a session that bypasses the...

The vulnerability of the application software interface of the Glances monitoring tool arises from improper validation of the data entered by the user against a list of allowed values. This allows a violator to circumvent existing security restrictions.

The vulnerability of the application programming interface of the Glances monitoring tool is related to improper verification of the data entered by the user against a list of allowed values. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...

CVE-2026-82474

A flaw was found in Sudo. This vulnerability allows users who are permitted to run specific commands to bypass security policy checks when using the execveat system call in ptrace-based intercept mode. By directly calling execveat or fexecve, an attacker can execute programs that would otherwise ...

CVE-2026-80675

A flaw was found in libbpf, a library for working with eBPF extended Berkeley Packet Filter programs in the Linux kernel. This vulnerability occurs when the signed loader fails to ensure that metadata maps are exclusive during verification. A hostile host could exploit this by omitting exclusivit...

[SECURITY] Fedora 43 Update: tor-0.4.9.11-1.fc43

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection, thus allowing both organizations and...

[SECURITY] Fedora 44 Update: tor-0.4.9.11-1.fc44

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection, thus allowing both organizations and...

OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors

The "create an instance" API in OpenStack Compute Nova Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:ispublic property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this issue is due to an incomplete fix for...

The vulnerability of the Windows Boot Manager (bootmgr) loader in Windows operating systems, which allows a hacker to circumvent security restrictions

The vulnerability of the Windows Boot Manager bootmgr loader in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...

The vulnerability of the Duo Workflows API interface of the software platform based on git for collaborative code development on GitLab EE allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the Duo Workflows API interface of the software platform based on git for collaborative code development in GitLab EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security...

[SECURITY] Fedora 43 Update: tor-0.4.9.8-1.fc43

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection, thus allowing both organizations and...

[SECURITY] Fedora 44 Update: tor-0.4.9.8-1.fc44

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection, thus allowing both organizations and...

CVE-2026-28873

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4. An app may be able to circumvent App Privacy Report logging...

PT-2026-40985

The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a different URL usingthe wrong host name when it is later retrieved.For example, a URL like http://example.com%2F127.0.0.1/, would be allowed bythe parser and get...

Vulnerabilities fixed in Microsoft Developer tools

Microsoft has fixed vulnerabilities in .NET, .NET Framework, Visual Studio and PowerShell. A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Accessing sensitive data - Circumvention of a security...

The vulnerability of the JetBrains Hub account management software, related to bypassing authentication through spoofing, allows attackers to circumvent existing security mechanisms.

The vulnerability of the JetBrains Hub account management software relates to the ability to bypass authentication through phising techniques. Exploiting this vulnerability allows a malicious actor to circumvent existing security measures remotely...