CLEANSTART-2026-SM16447 When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface

CVE-2026-56853 affects multiple packages. When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. See references for individual vulnerability details...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

ROS-20261002-73-0095

The vulnerability of the ECPG client of the PostgreSQL database management system is related to a countable loss of significance. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending an incorrect bytea value...

ROS-20261002-73-0093

The vulnerability of the ECPG client of the PostgreSQL database management system is related to a countable loss of significance. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending an incorrect bytea value...

ROS-20261002-73-0096

The vulnerability of the ECPG client of the PostgreSQL database management system is related to a countable loss of significance. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending an incorrect bytea value...

Unauthenticated Certificate Injection on Brocade ASCG before 3.5.0 (CVE-2026-87425)

An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0. By supplying an unauthorized Certificate Authority CA certificate to an unauthenticated management interface, the attacker can cause the system to trust unauthorized certificates,...

RHEL 7 : freerdp (RHSA-2026:74610)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:74610 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...

tomcat: Apache Tomcat: Improper Authentication due to principal lookup failure

A flaw was found in Apache Tomcat. This improper authentication vulnerability allows a remote attacker to be authenticated even if their user account does not exist in the DataSourceRealm, under specific circumstances such as CLIENT-CERT or SPNEGO authentication. This can lead to unauthorized...

Exploit for CVE-2026-104286

FortiMail CVE-2026-104286 Path Traversal Exploit Overview...

loki

loki 由 NCC Group Plc 以开源形式发布 - http://www.nccgroup.com/ 由 Dave Spencer 开发，david dot spencer at nccgroup dot com http://www.github.com/nccgroup/Loki 根据 AGPL 发布，更多信息请参阅 LICENSE 描述 Loki（Limited Obstructive Keyboard Impersonator，受限阻塞式键盘模拟器）内置了一个 RDP...

GHSA-8988-9CW3-XX77 vulnerabilities

Vulnerabilities for packages: nemo, openstack-keystone-2026.1, spamcheck, openstack-keystone-2025.1-fips, py3-opentelemetry-exporter-otlp, openstack-keystone-2025.1, openstack-heat-2025.2, datadog-agent, jupyterhub-k8s-singleuser-sample, openstack-manila-2026.1, ansible-operator,...

GHSA-GH4C-6FX4-QH6G vulnerabilities

Vulnerabilities for packages: nemo, openstack-keystone-2026.1, spamcheck, openstack-keystone-2025.1-fips, py3-opentelemetry-exporter-otlp, openstack-keystone-2025.1, openstack-heat-2025.2, datadog-agent, jupyterhub-k8s-singleuser-sample, openstack-manila-2026.1, ansible-operator,...

GHSA-VXQ7-64XX-V4GW vulnerabilities

Vulnerabilities for packages: nemo, openstack-keystone-2026.1, spamcheck, openstack-keystone-2025.1-fips, py3-opentelemetry-exporter-otlp, openstack-keystone-2025.1, openstack-heat-2025.2, datadog-agent, jupyterhub-k8s-singleuser-sample, openstack-manila-2026.1, ansible-operator,...

CVE-2026-97689 vulnerabilities

Vulnerabilities for packages: nemo, openstack-keystone-2026.1, spamcheck, openstack-keystone-2025.1-fips, py3-opentelemetry-exporter-otlp, openstack-keystone-2025.1, openstack-heat-2025.2, datadog-agent, jupyterhub-k8s-singleuser-sample, openstack-manila-2026.1, ansible-operator,...

GO-2026-6494 RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go

RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go...

GO-2026-6577 Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei

Nuclei: Local File Read via MySQL Client Sandbox Bypass in github.com/projectdiscovery/nuclei...

BrokenPipe

BrokenPipe - Steam Client Service LPE Vulnerability This is the single-script version. The original compiled C++ PoC is on the legacy branch. Thanks to John Hammond for the suggestion, subscribe to him! PoC video: YouTube John Hammond's breakdown: YouTube Greetz to @MSNIGHTMARE2000 for the inspo ...

ca-clone

CA 克隆脚本 用于克隆 CA 证书以在 HTTPS 客户端攻击中使用的脚本。目前包含克隆根 Comodo CA 和 Digicert CA 的脚本，这两者在 IoT 设备中均被广泛信任。 使用方法 就地运行任一脚本即可自动生成密钥和证书。通常您只需运行其中一个，但此处两者均包含在内，以防您怀疑需要特定的 CA。 将生成的 P12 导入您的 HTTPS 代理。 在 Burp 中，可通过在 Proxy - Options 下将 P12 文件作为 CA 证书导入来完成此操作。别忘了备份您当前的 CA！...

CVE-2025-12028

1 シンプルなHTTPサーバーを起動して、概念実証ページをホストする mkdir -p /tmp/attacker && cd /tmp/attacker php -S 127.0.0.1:8000 2 以下の内容でファイル /tmp/attacker/poc.html を作成する document.getElementById'x'.submit; 3 ログイン中のブラウザセッションでPoCをトリガーする 以下にログインした状態で: http://localhost/wordpress 次を開く: http://127.0.0.1:8000/poc.html 同じブラウザセッションで。...

CVE-2026-101100

A flaw was found in ag-ui's @ag-ui/client npm package. When processing manipulated tool call inputs in FilterToolCallsMiddleware filter-tool-calls.ts, the middleware fails to perform complete resource and state cleanup. A remote authenticated attacker can exploit this vulnerability by submitting...