EUVD-2026-72859

AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability in LoginControl::verifyChallenge that uses loose comparison == instead of strict comparison === against unset session values. Attackers with only a password can submit an empty request to...

Visual Studio Code Security Feature Bypass Vulnerability

Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership()

A flaw was found in the Linux kernel's iouring/poll component. A logic error exists in the iopollgetownership function due to an incorrect signed comparison. This flaw prevents the necessary slowpath from being triggered when the IOPOLLCANCELFLAG is set, potentially leading to unexpected behavior...

kernel: io_uring/poll: fix signed comparison in io_poll_get_ownership()

A flaw was found in the Linux kernel's iouring/poll component. A logic error exists in the iopollgetownership function due to an incorrect signed comparison. This flaw prevents the necessary slowpath from being triggered when the IOPOLLCANCELFLAG is set, potentially leading to unexpected behavior...

CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity

CVE-2026-5556 – Kubernetes アドミッションコントローラーの大文字小文字の区別によるバイパス プログラムコード（Python アドミッションウェブフック＋エクスプロイト） root@kitploit: !/usr/bin/env python3 admissionwebhook.py - Vulnerable webhook that rejects pods with specific name from flask import Flask, request, jsonify app = Flaskname DENIEDPODNAMES =...

PT-2026-88060

VULN-196220 is now CVE-2026-81376. It is a very simple and very dangerous vulnerability that allows code execution when opening untrusted code in sandboxed untrusted mode. Please update ASAP!...

RHEL 9 : kernel (RHSA-2026:64808)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64808 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcm...

CVE-2012-2122

CVE-2012-2122 - MySQL 认证绕过 针对 CVE-2012-2122 的概念验证（PoC），这是一个影响易受攻击的 MySQL 和 MariaDB 服务器的严重认证绕过漏洞。 免责声明 本项目仅用于教育目的、安全研究和授权的渗透测试。请勿将此软件用于您不拥有或未经明确许可测试的系统。 CVE-2012-2122 是 MySQL 密码验证逻辑中发现的一个认证绕过漏洞。 由于整数转换/比较错误，在某些条件下，无效密码的比较结果可能被错误地判定为相等，从而导致认证意外成功。 攻击者无需知道有效密码，只需反复使用任意密码尝试认证，直到触发该比较错误。 成功的概率大约为： 每 2...

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik allows a hacker to bypass security restrictions and gain read-only access to data.

The vulnerability of the SSH protocol implementation in the RouterOS operating system of MikroTik is related to errors in verifying the cryptographic signature during the incorrect comparison of the RSA public key assigned to the user. Exploiting this vulnerability allows a malicious actor to...

jenkins_scan

jenkinsscan Jenkins 환경을 감지하고 CVE-2024-23897을 확인합니다. 작동 방식 Jenkins 감지 다음 경로를 테스트합니다: /, /login, /oops, /api/json, /cli, /jenkins/, /jenkins/api/json 다음을 통해 식별합니다: 1. X-Jenkins 헤더 — 가장 신뢰할 수 있으며 버전도 반환합니다. 2. X-Hudson 헤더 — 오래된 인스턴스 3. HTML 본문 — "login to jenkins", "hudson.model" 등의 문자열 4. /api/json...

Enterprise-Information-Security-Risk-Assessment-Oracle-E-Business-Suite-Case-Study

情報セキュリティ:GDPR コンプライアンス & インシデントレスポンス 高リスクの生体認証監視システムCCTV、顔認識技術、集中型コンタクトトレーシング向けの包括的なセキュリティおよびプライバシーコンプライアンスフレームワーク。フレームワーク比較分析ISO 27001、Cyber Essentials、NIST CSF 2.0、COBITと、2025年のOracle E-Business Suite CVE-2025-61882侵害を分析した詳細なインシデントレスポンスケーススタディを含む。 目次 プロジェクト概要 第1章:データ保護コンプライアンス...

Rogue-Framework

Rogue Framework "Make it rain. " Rogue Amendiares The best intel-broker in night city Rogue Framework is a desktop workbench for AFL++, cross-architecture QEMU fuzzing, harness development, lightweight Ghidra headless analysis, custom mutators, and patch comparison. It is intentionally an auditab...

Powershell-Tools

PSUnzipper - PowerShell Unzipper .NET에서 SharpZipLiB를 사용하며 런타임에 로드됩니다디스크에 파일 없음 - 참조: https://github.com/icsharpcode/SharpZipLib 암호와 함께 사용할 수 있습니다zip, unzip AES 및 ZipCrypto 두 가지 암호화 방식 모두 지원됩니다. 압축/해제 시 임시 파일이 생성되지 않으며 모두 메모리에서 실행됩니다. McAfeeDEBUP - McAfee 격리 파일 재생성 PowerShell로 작성되었으며 GUI와 함께 exe로...

ESXi-Ransomware-Scanner-mi

ESXiransomwarescanner Программа, которая сканирует IP-адреса на наличие признаков компрометации ESXi, извлекая записку с требованием выкупа из HTML-страницы и сравнивая строки. Требования python 3.x requests BeautifulSoup tqdm colorama Установка Используйте менеджер пакетов pip для установки...

CVE-2026-86258

nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.canshow that uses string-prefix comparison instead of proper path validation. Attackers can read files from sibling directories outside the configured root by requesting paths that share the root as a textual prefi...

EUVD-2026-72125

nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.canshow that uses string-prefix comparison instead of proper path validation. Attackers can read files from sibling directories outside the configured root by requesting paths that share the root as a textual prefi...

CVE-2026-86258 nbviewer through 1.0.1 Path Traversal via LocalFileHandler

nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.canshow that uses string-prefix comparison instead of proper path validation. Attackers can read files from sibling directories outside the configured root by requesting paths that share the root as a textual prefi...

CVE-2026-86258 nbviewer through 1.0.1 Path Traversal via LocalFileHandler

nbviewer through 1.0.1 contains a path traversal vulnerability in LocalFileHandler.canshow that uses string-prefix comparison instead of proper path validation. Attackers can read files from sibling directories outside the configured root by requesting paths that share the root as a textual prefi...

CVE-2026-86254

wger versions through master contain an incomplete authorization bypass in wger/core/views/user.py where three views retain the original gym-scope check using raw integer comparison instead of the issamegym helper, allowing gym staff with gym=None to delete, deactivate, or activate any other user...

EUVD-2026-72110

wger versions through master contain an incomplete authorization bypass in wger/core/views/user.py where three views retain the original gym-scope check using raw integer comparison instead of the issamegym helper, allowing gym staff with gym=None to delete, deactivate, or activate any other user...