The vulnerability of the software for the training and control system “OLIMPOX” arises from insufficient restrictions on authentication attempts, allowing a perpetrator to circumvent existing security restrictions.

The vulnerability of the “OLIMPOX” training and control system’s software is related to insufficient restrictions on authentication attempts. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions remotely...

droidbox

소개 DroidBox는 Android 애플리케이션의 동적 분석을 제공하기 위해 개발되었습니다. 분석이 완료되면 생성된 결과에 다음 정보가 설명됩니다: 분석된 패키지의 해시 들어오는/나가는 네트워크 데이터 파일 읽기 및 쓰기 작업 시작된 서비스 및 DexClassLoader를 통해 로드된 클래스 네트워크, 파일 및 SMS를 통한 정보 유출 우회된 권한 Android API를 사용하여 수행된 암호화 작업 브로드캐스트 리시버 목록 전송된 SMS 및 전화 통화 또한 패키지의 동작을 시각화하는 두 개의 그래프가 생성됩니다. 하나는 작업...

CVE-2023-27350

CVE-2023-27350 이 도구는 대규모 인증 우회Papecut MF/NG를 위해 특별히 설계되었습니다. 이는 대규모로 인증 메커니즘을 우회 또는 회피하는 과정을 의미합니다. 스크린샷 요구 사항 Python3.7+ 지원 운영체제 Linuxer Wingays 시작하기 $ git clone https://github.com/Pari-Malam/CVE-2023-27350 $ cd CVE-2023-27350 $ pip/pip3 install -r requirements.txt $ python/python3 papercut.py 사...

The vulnerability of the Xvnc process of the XRDP server allows attackers to circumvent security restrictions.

The vulnerability of the Xvnc process of the XRDP server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to circumvent security restrictions...

ROS-20261005-73-0033

The vulnerability of the Rsync file transfer and synchronization utility is related to the incorrect handling of symbolic links before accessing files. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...

CVE-2026-103012

A flaw was found in claude-code. When retrieving server-managed settings, the application prioritized a locally stored credential over an active organizational account sign-in. If the configuration server rejected the stored credential, a local user could initiate a session that bypasses the...

The vulnerability of the application software interface of the Glances monitoring tool arises from improper validation of the data entered by the user against a list of allowed values. This allows a violator to circumvent existing security restrictions.

The vulnerability of the application programming interface of the Glances monitoring tool is related to improper verification of the data entered by the user against a list of allowed values. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions remotely...

CVE-2026-82474

A flaw was found in Sudo. This vulnerability allows users who are permitted to run specific commands to bypass security policy checks when using the execveat system call in ptrace-based intercept mode. By directly calling execveat or fexecve, an attacker can execute programs that would otherwise ...

CVE-2026-80675

A flaw was found in libbpf, a library for working with eBPF extended Berkeley Packet Filter programs in the Linux kernel. This vulnerability occurs when the signed loader fails to ensure that metadata maps are exclusive during verification. A hostile host could exploit this by omitting exclusivit...

[SECURITY] Fedora 43 Update: tor-0.4.9.11-1.fc43

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection, thus allowing both organizations and...

[SECURITY] Fedora 44 Update: tor-0.4.9.11-1.fc44

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection, thus allowing both organizations and...

OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors

The "create an instance" API in OpenStack Compute Nova Folsom, Grizzly, and Havana does not properly enforce the os-flavor-access:ispublic property, which allows remote authenticated users to boot arbitrary flavors by guessing the flavor id. NOTE: this issue is due to an incomplete fix for...

The vulnerability of the Windows Boot Manager (bootmgr) loader in Windows operating systems, which allows a hacker to circumvent security restrictions

The vulnerability of the Windows Boot Manager bootmgr loader in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...

The vulnerability of the Duo Workflows API interface of the software platform based on git for collaborative code development on GitLab EE allows a perpetrator to circumvent existing security restrictions.

The vulnerability of the Duo Workflows API interface of the software platform based on git for collaborative code development in GitLab EE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent existing security...

[SECURITY] Fedora 43 Update: tor-0.4.9.8-1.fc43

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection, thus allowing both organizations and...

[SECURITY] Fedora 44 Update: tor-0.4.9.8-1.fc44

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection, thus allowing both organizations and...

CVE-2026-28873

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.4 and iPadOS 26.4. An app may be able to circumvent App Privacy Report logging...

PT-2026-40985

The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a different URL usingthe wrong host name when it is later retrieved.For example, a URL like http://example.com%2F127.0.0.1/, would be allowed bythe parser and get...

Vulnerabilities fixed in Microsoft Developer tools

Microsoft has fixed vulnerabilities in .NET, .NET Framework, Visual Studio and PowerShell. A malicious party can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Accessing sensitive data - Circumvention of a security...

The vulnerability of the JetBrains Hub account management software, related to bypassing authentication through spoofing, allows attackers to circumvent existing security mechanisms.

The vulnerability of the JetBrains Hub account management software relates to the ability to bypass authentication through phising techniques. Exploiting this vulnerability allows a malicious actor to circumvent existing security measures remotely...