Lucene search
+L

1488 matches found

Kitploit
Kitploit
•added 2026/10/04 8:04 p.m.•22 views

parsec-cloud

.. raw:: html シンプルかつ安全な、クラウド上のエンドツーエンド暗号化ファイル共有 Parsec Parsec は、シンプルかつ暗号学的に安全なファイル共有のためのクラウドベースのアプリケーションです。 🔐 クライアントサイド E2EE により、あなたと共有相手だけがデータにアクセスできます。 ✒️ 暗号署名により、各変更の作成者を特定できます。 🤝 リンクとトークンコードを使って、安全にメンバーを組織に招待できます。 📂 仮想ドライブで、お好みのソフトウェアを使ってローカルにデータにアクセスできます。 📆 データの履歴を参照し、任意の時点のファイルを復元できます。 🧑‍💻...

6.1AI score
SaveExploits0
CVE
CVE
•added 2026/10/04 4:30 p.m.•12 views

CVE-2026-105161

A flaw exists in invariant-systems-ai aiir versions up to 1.7.0 within the Policy Gate Handler component. This vulnerability allows for improper verification of cryptographic signatures through an unknown function, which can be triggered via a remote manipulation. The impact includes potential in...

6.9CVSS5.3AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/04 12:00 a.m.•3 views

PT-2026-104644

A flaw has been found in invariant-systems-ai aiir up to 1.7.0. The affected element is an unknown function of the component Policy Gate Handler. Executing a manipulation can lead to improper verification of cryptographic signature. The attack can be executed remotely. It is advisable to upgrade...

6.9CVSS5.3AI score
SaveExploits0References6
NVD
NVD
•added 2026/10/02 11:17 a.m.•5 views

CVE-2026-86326

An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface could provi...

8.6CVSS0.00188EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/02 10:21 a.m.•37 views

CVE-2026-86326

An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface could provi...

8.6CVSS0.00188EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/02 10:21 a.m.•12 views

CVE-2026-86326

A vulnerability exists in protocol gateways due to an improper verification of cryptographic signatures . The device fails to verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface can provide a sp...

8.6CVSS6.2AI score0.00188EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/02 10:21 a.m.•7 views

EUVD-2026-91373

An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface could provi...

8.6CVSS6.2AI score0.00188EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•6 views

PT-2026-104202

An improper verification of cryptographic signature vulnerability exists in protocol gateways because the device does not properly verify the cryptographic authenticity of firmware images before installation. An attacker with high privileges and access to the firmware update interface could provi...

8.6CVSS6.2AI score0.00188EPSS
SaveExploits0References4
NVD
NVD
•added 2026/10/01 12:17 p.m.•8 views

CVE-2026-94212

Improper verification of cryptographic signature vulnerability in Apache APISIX. Any unauthenticated attacker could impersonate any user on every route protected by the saml-auth plugin under default configuration. This issue affects Apache APISIX: from 3.17.0 through 3.18.0. Users are recommende...

6.4CVSS0.00265EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/10/01 11:01 a.m.•6 views

EUVD-2026-90765

Improper verification of cryptographic signature vulnerability in Apache APISIX. Any unauthenticated attacker could impersonate any user on every route protected by the saml-auth plugin under default configuration. This issue affects Apache APISIX: from 3.17.0 through 3.18.0. Users are recommende...

6.4CVSS5.8AI score0.00265EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/01 11:01 a.m.•10 views

CVE-2026-94212

Apache APISIX versions 3.17.0 through 3.18.0 are vulnerable to an improper verification of cryptographic signature flaw within the saml-auth plugin. Under default configurations, an unauthenticated attacker can exploit this to impersonate any user across every route protected by the plugin. To re...

6.4CVSS5.8AI score0.00265EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/10/01 11:01 a.m.•40 views

CVE-2026-94212 Apache APISIX: unauthenticated impersonation issue in saml-auth

Improper verification of cryptographic signature vulnerability in Apache APISIX. Any unauthenticated attacker could impersonate any user on every route protected by the saml-auth plugin under default configuration. This issue affects Apache APISIX: from 3.17.0 through 3.18.0. Users are recommende...

6.4CVSS0.00265EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/09/30 5:40 p.m.•8 views

CVE-2026-47554

A flaw was found in nvidia-driver. Under conditions of memory pressure, the kernel mode layer improperly verifies cryptographic signatures, allowing verification checks to be bypassed. A local attacker with low privileges could exploit this vulnerability to tamper with system data or cause a Deni...

7.1CVSS5.7AI score0.00092EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/30 8:16 a.m.•7 views

CVE-2026-102508

Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...

9.2CVSS0.00134EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/30 7:42 a.m.•9 views

EUVD-2026-89674

Improper Verification of Cryptographic Signature and Improper Certificate Validation in the OPC UA driver of Apache PLC4X PLC4J allows an attacker in a network position between client and server to impersonate the OPC UA server and to read, forge or modify secure-channel traffic, including user...

9.2CVSS5.8AI score0.00134EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/29 9:04 p.m.•39 views

CVE-2026-91191 Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature

The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock done function disables signature verification in the OPKG configuration before restoring optional packages from a writable, unsigned feed...

7.7CVSS0.00209EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/29 9:04 p.m.•4 views

CVE-2026-91191 Lantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature

The device's update mechanism includes conditions that allow unauthorized software packages to be accepted as authentic. During the boot process, the stock done function disables signature verification in the OPKG configuration before restoring optional packages from a writable, unsigned feed...

7.7CVSS6.6AI score0.00209EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/29 7:37 p.m.•7 views

CVE-2026-100293 Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hashing. This design allows an attacker who can reach the update routine to introduce untrusted firmware images that the...

8.8CVSS5.9AI score0.00177EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/29 7:37 p.m.•15 views

CVE-2026-100293

Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 contains a vulnerability in its local and cloud update mechanisms. The system applies new firmware without cryptographic verification , relying solely on basic hashing. This allows an attacker with network access to the update routine to inject and ...

8.8CVSS5.9AI score0.00177EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/29 7:37 p.m.•37 views

CVE-2026-100293 Improper verification of cryptographic signature in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud update mechanisms apply new firmware without any cryptographic verification, relying only on basic hashing. This design allows an attacker who can reach the update routine to introduce untrusted firmware images that the...

8.8CVSS0.00177EPSS
SaveExploits0References1
Rows per page
Query Builder