CentOS Linux 8 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal (CENTOS-STREAM8:CLSA-2026:1769092364)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1769092364 advisory. - 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778259521)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778259521 advisory. - NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0552. CVE-2022-3278 - Floating Point Comparison with Incorrect...

GHSA-J6R3-76F7-8JCV ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range

Summary isInSubnet and isHostInSubnet accept an address of either family and compare masked binary strings without checking that both operands are the same family. Address4 pads to 32 bits and Address6 to 128, so whenever the leading bits agree the strings are equal: new...

CVE-2026-90916

Joomla! Core - 20260906 - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to view inaccessible contents...

CVE-2026-90916 Joomla! Core - [20260906] - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260906 - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to view inaccessible contents...

CVE-2026-90916 Joomla! Core - [20260906] - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260906 - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to view inaccessible contents...

CVE-2026-90916

The Joomla! Core software is affected by an improper access check within the content history comparison view. This vulnerability allows unauthorized users to view contents they should not have access to. The affected versions include Joomla 4.0.0-5.4.8 and 6.0.0-6.1.3 . No specific exploitation d...

EUVD-2026-89072

Joomla! Core - 20260906 - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to view inaccessible contents...

CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity

" or "use". The actual input as provided might have an unclosed code fence. Our translation should preserve the exact given markdown, including the unclosed code fence? But the user expects valid Markdown maybe. We need not correct. Let's examine the initial code block: It has an opening python a...

CVE-2026-90916: Improper Access Control

Joomla! Core - 20260906 - Core - Improper ACL checks in content history comparison view in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - An improper access check allows unauthorized users to view inaccessible contents...

CVE-2026-101914

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path method name matcher used by RBAC performs a prefix comparison instead of an equality comparison when case-insensitive matching is enabled. If one service...

CVE-2012-2122

CVE-2012-2122 - MySQL認証バイパス CVE-2012-2122の概念実証（PoC）です。この脆弱性は、脆弱なMySQLおよびMariaDBサーバーに影響を与える深刻な認証バイパスです。 免責事項 このプロジェクトは、教育目的、セキュリティ研究、および許可されたペネトレーションテストのみを目的としています。所有していないシステムやテストする明示的な許可がないシステムに対してこのソフトウェアを使用しないでください。 CVE-2012-2122 は、MySQLのパスワード検証ロジックで発見された認証バイパスの脆弱性です。...

Updated pam packages fix a security vulnerability

The updated packages fix a security vulnerability: Linux-PAM pamuserdb Observable Timing Discrepancy in Plaintext Password Comparison. CVE-2026-54411...

MGASA-2026-0461 Updated pam packages fix a security vulnerability

The updated packages fix a security vulnerability: Linux-PAM pamuserdb Observable Timing Discrepancy in Plaintext Password Comparison. CVE-2026-54411...

CVE-2022-45599

CVE-2022-45599 CVE URL:| https://vulners.com/cve/CVE-2022-45599 ---|--- 報告者:| TanYeeTat 製品:| Aztech WMB250AC ワイヤレスメッシュルーター 影響を受けるファームウェア:| 2020年リリース topaz-linux.lzma.img ファームウェアのダウンロード:| クローズドソース 製品マニュアル: https://kylaconnect.com/download-center/ 脆弱性は、2022年6月7日に [email protected] 経由で Aztech...

USN-8830-1 php-phpseclib vulnerabilities

It was discovered that phpseclib did not perform constant-time padding validation when using AES in CBC mode. A remote attacker could possibly use this issue to obtain sensitive information. CVE-2026-32935 It was discovered that phpseclib did not use a constant-time comparison when validating SSH...

CVE-2023-43154-PoC

CVE-2023-43154 - Macs Framework v1.1.4f CMS 型の混乱の脆弱性 目次 1. 概要 2. 概念実証 3. 技術的説明 4. 緩和策 概要 CVE-ID : CVE-2023-43154 CVSS 3.1 : 9.8 脆弱性の説明 : isValidLogin 関数における緩い比較により、PHP の型の混乱の脆弱性が発生し、これを悪用して認証をバイパスし、管理者アカウントを乗っ取ることが可能です。 脆弱なパラメータ : CMS 上のユーザーのユーザー名とパスワード。 影響を受ける製品 : Macs Framework v1.14f -...

CVE-2026-7458

🧨 CVE-2026-7458 – PickPlugins User Verification OTP 绕过 通过 OTP 验证 REST API 中的松散比较实现未认证身份验证绕过 PickPlugins User Verification ≤ 2.0.46 📖 描述 PickPlugins 为 WordPress 开发的 User Verification 插件（版本 ≤ 2.0.46 ）在其 OTP 登录机制中存在一个严重漏洞。由于验证逻辑中采用了松散比较（==），未认证的攻击者可以通过发送布尔值 true（而非数字 OTP 值）来绕过 OTP 认证。攻击者无需知道 OTP...

PT-2026-102334

Name of the Vulnerable Software and Affected Versions @grpc/grpc-js versions prior to 1.13.1 @grpc/grpc-js versions prior to 1.14.1 Description When case-insensitive matching is enabled, the Role-Based Access Control RBAC exact path matcher performs a prefix comparison instead of an equality...

CVE-2026-101914: Partial String Comparison

@grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to 1.13.1 and 1.14.1, the exact path method name matcher used by RBAC performs a prefix comparison instead of an equality comparison when case-insensitive matching is enabled. If one service...