66638 matches found
CVE-2026-26418
CVE-2026-26418 Missing Authentication and Authorization in Web API Vulnerability Summary A missing authentication and authorization vulnerability was identified in the Web API layer of Tata Consultancy Services TCS – Cognix Recon Client v3.0. Certain exposed API endpoints did not enforce proper...
CVE-2026-26417
CVE-2026-26417 Broken Access Control in Password Reset Functionality Vulnerability Summary A broken access control vulnerability was identified in Tata Consultancy Services TCS – Cognix Recon Client v3.0. The issue allowed authenticated users to reset passwords of arbitrary user accounts by...
CVE-2026-103884
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...
EUVD-2026-90972
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...
CVE-2026-103884
A flaw exists in the X.509 client certificate authenticator of Keycloak . When CRL Distribution Point checking is enabled, the server fails to properly validate file paths provided within a client certificate. This path traversal vulnerability allows an attacker to provide a specially crafted cer...
CVE-2026-103884 Keycloak-services: keycloak-services: path traversal in x.509 crl distribution point allows arbitrary local file read
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths provided in a client certificate. An attacker can provide a specially crafted certificate that causes the server to...
CVE-2026-92868
A flaw was found in Pgpool-II due to improper certificate validation. A remote, unauthenticated attacker can exploit this issue to bypass client certificate authentication mechanisms. Successful exploitation may allow an attacker to gain unauthorized access to the database proxy service. Mitigati...
windows-smb-vulnerability-framework-cve-2025-33073
Windows SMB Client Vulnerability Research Framework Author: cyberseallll Created: 2025 Overview I developed this research framework to analyze and understand CVE-2025-33073, a critical Windows SMB Client Elevation of Privilege vulnerability. This implementation provides comprehensive tools for...
CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-
CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical- Oracle Fusion Middleware Oracle HTTP Server / WebLogic Server Proxy Plug-in has an easily exploitable, unauthenticated, network-reachable flaw allowing compromise over HTTP. Affected supported versions include 12.2.1.4.0,...
CVE-2024-49112
LDAP Nightmare An exploit for CVE-2024-49112 reported by Yuki Chen @guhe120. A vulnerability in Windows Lightweight Directory Access Protocol LDAP. Created by SafeBreach Labs published on January 1st 2025. For the full technical analysis of the vulnerability and how we managed to exploit it check...
tomcat: Apache Tomcat: Improper Authentication due to principal lookup failure
A flaw was found in Apache Tomcat. This improper authentication vulnerability allows a remote attacker to be authenticated even if their user account does not exist in the DataSourceRealm, under specific circumstances such as CLIENT-CERT or SPNEGO authentication. This can lead to unauthorized...
Antignis
Antignis , , . . '..' / \ / ||| || '-, ,-' / /\ \ / \ \ |/ \ / | |/ / '. .:. .' / | \ | \ | | / // | \ |\ \ '|Y|' | /| /| |\ /|| // , \ / , / / // / / ,- I -, | /=\ | ,-' |=| '-, - / Link to blogpost:...
tor-ip-changer
tor-ip-changer request new identity every X seconds interval using TOR client !!!iam not responsible for anything what you will do with this program, or for any other sts !!! it is for education purposes only...
go-zeek-broker-ws
Zeek Broker websocket interface library for Golang This library implements the Zeek Broker websocket interface. Helper functions are provided with reasonable mappings between Zeek and Go types. Usage The library contains two packages: encoding encoding models the recursive JSON-based data structu...
Critical: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2026-103353
Incorrect Behavior Order vulnerability in WP ManageNinja LLC FluentForm fluentform allows Removing Important Client Functionality.This issue affects FluentForm: from n/a through 6.2.14...
CVE-2026-103353 WordPress FluentForm plugin <= 6.2.14 - Broken Access Control vulnerability
Incorrect Behavior Order vulnerability in WP ManageNinja LLC FluentForm fluentform allows Removing Important Client Functionality.This issue affects FluentForm: from n/a through 6.2.14...
CVE-2026-103353 WordPress FluentForm plugin <= 6.2.14 - Broken Access Control vulnerability
Incorrect Behavior Order vulnerability in WP ManageNinja LLC FluentForm fluentform allows Removing Important Client Functionality.This issue affects FluentForm: from n/a through 6.2.14...