CVE-2026-71644

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE...

the-token-was-a-row-number-cve-2026-67602-phpipam-rest-api-authentication-bypass

CVE-2026-67602 — phpIPAM 1.8.2 REST API 身份验证绕过 phpIPAM REST API 中存在未认证的身份验证绕过漏洞，其根源在于对象缓存键冲突：在解析 API 应用的 appid 时缓存的数据行，只要提供的令牌等于该行的数字 id，就能满足后续的 appcode（令牌）检查。应用的真实密钥从未被比较。 CVE : CVE-2026-67602 CVSS 4.0 : 9.3 严重（AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N） CWE : CWE-706（使用不正确解析的名称或引用） 受影响版本 : 1.8.2 之...

DEBIAN-CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

EUVD-2026-75907

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

CVE-2026-78133

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

CVE-2026-78133

CVE-2026-78133 is a use-after-free vulnerability in libcharon , the core component of strongSwan (versions 6.0.0 through 6.0.7), triggered during IKEv2 rekeying collision handling . According to the Debian security advisory, this can lead to remote code execution . The CVSS 3.1 base score is 7.5 ...

collision-webshell

Webshell 碰撞 此仓库包含 2 个具有相同 MD5 哈希的文件： webshell.php normal.php 文件的 MD5： root@kitploit: $ md5sum .php b719a17ae091ed45fb874c15b2d9663f normal.php b719a17ae091ed45fb874c15b2d9663f webshell.php webshell.php 的 Hexdump： root@kitploit: $ hexdump -C webshell.php 00000000 3c 3f 3d 65 76 61 6c 28 24 5f 47 4...

PT-2026-89739

libcharon in strongSwan 6.0.0 through 6.0.7 has a use-after-free in IKEv2 rekeying collision handling...

CVE-2026-71644

RACER by Robotics-STAR-Lab (SYSU STAR Group) is vulnerable to unsafe trajectory planning and potential UAV collisions when affected. The root cause is a missing default case in the Finite State Machine (FSM) that stops publishing swarm trajectories when a drone enters the IDLE state, allowing a r...

EUVD-2026-76112

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE...

CVE-2026-71644

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE...

PT-2026-89877

An issue in Robotics-STAR-Lab SYSU STAR Group RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe trajectory planning and potential UAV collisions via a missing default case in the FSM that stops publishing swarm trajectories when the drone enters IDLE...

jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision

A flaw was found in Eclipse Jetty, a widely used web server and servlet container. This vulnerability affects its HTTP Digest authentication mechanism, which is used to verify user identities. The issue arises because Jetty's hash computation for passwords does not correctly handle certain...

json-interop-vuln-labs

JSON 互操作性漏洞实验室 描述 这些是我研究文章《探索 JSON 互操作性漏洞》的配套实验室。 实验 1：电子商务应用中的免费购买 键碰撞攻击：重复键优先级不一致 大数表示不一致 实验 2：多租户应用中的权限提升 键碰撞攻击：字符截断 默认情况下，这些实验室绑定到主机的 5000-5004 端口。 攻击技术 1. 键碰撞 重复键优先级不一致 root@kitploit: "qty": 1, "qty": -1 字符截断 对于后键优先的解析器，会发生截断（对于前键优先的解析器，则需翻转顺序） root@kitploit: "qty": 1, "qty": -1 "qty": 1,...

jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision

A flaw was found in Eclipse Jetty, a widely used web server and servlet container. This vulnerability affects its HTTP Digest authentication mechanism, which is used to verify user identities. The issue arises because Jetty's hash computation for passwords does not correctly handle certain...

CVE-2026-88790

A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument filepath leads to path traversal. Local...

EUVD-2026-75507

A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument filepath leads to path traversal. Local...