39263 matches found
CVE-2026-20290
CVE-2026-20290 affects the Snort 2 Detection Engine within Cisco Secure Firewall Threat Defense (FTD) Software . The root cause is incomplete validation of SSL certificates during parsing. An unauthenticated, remote attacker can exploit this by sending a crafted SSL connection setup request, caus...
CVE-2026-73450
On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state. If the MLAG primary switch fails while these...
EUVD-2026-80083
On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state. If the MLAG primary switch fails while these...
CVE-2026-73450
On affected Arista EOS platforms with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the heartbeat network segment can send crafted UDP packets to corrupt the dual-primary state. If the MLAG primary switch fails while these packets are present, the secondary sw...
CVE-2026-73450 Security Advisory 0161
On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state. If the MLAG primary switch fails while these...
SQLi_PW
SQLi SQL injection là gì? SQL Injection SQLi là một lỗ h...
PT-2026-93259
Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description An unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state of platforms running Arist...
CISA: Using Cyber Decoys to Strengthen Detection and Response
CISA developed this guidance to help defensive teams at varying levels of cybersecurity maturity plan and implement cyber decoy strategies that strengthen their detection and response capabilities. Many organizations struggle to detect adversaries who use legitimate credentials, native tools, and...
CVE-2026-20290: Buffer Access with Incorrect Length Value
A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 2 Detection Engine to restart. This vulnerability is due to incomplete validation of the SSL...
PT-2026-93974
A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 2 Detection Engine to restart. This vulnerability is due to incomplete validation of the SSL...
CVE-2026-73450: Insufficient Verification of Data Authenticity
On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state. If the MLAG primary switch fails while these...
macnoise v1.0.0
MacNoise MacNoise generates real macOS telemetry: network connections, file writes, process spawns, plist mutations, TCC probes, and more. Point it at a machine running your EDR, SIEM, or firewall stack and see what actually fires - not what the vendor datasheet claims will fire. For background o...
reasongate v0.4.0
ReasonGate A self-hostable gate that inspects the text going into and out of an LLM and returns an explainable allow / flag / block decision with a machine-readable audit record for every call. What this is The open-source core is rule-based. It does four things: recognizes known prompt-injection...
CVE-2026-73952
creationtimestamp| type| source ---|---|--- 2026-09-15 22:10:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlnc6b3i22f 2026-09-23 09:50:41+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11 2026-09-23 14:07:07+00:00| seen|...
CVE-2026-76682
A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...
CVE-2026-76682 Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways
A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...
EUVD-2026-79208
A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...
CVE-2026-76682
CVE-2026-76682 affects HPE Networking EdgeConnect SD-WAN Gateways , specifically the network security monitoring component of its intrusion detection systems. The root cause is a limited buffer overflow that an unauthenticated remote attacker can exploit over the network. Successful exploitation ...
craready-test-java-vulns
craready-test-java-vulns Módulo de prueba del escáner SBOM/CVE de CRAReady — NO USAR EN PRODUCCIÓN Este repositorio contiene dependencias Java Maven intencionalmente vulnerables para probar el pipeline de generación de SBOM y detección de vulnerabilidades de CRAReady. Incluye algunos de los CVEs...
SEMA-GUARD: Semantic and Graph-Based Vulnerability Detection in Assembly Code
In cases where source code is not available, such as malware analysis, firmware analysis, and embedded systems analysis, vulnerability detection in compiled programs has gained importance. Current methods are heavily reliant on syntactical regularities or higher level representations that are...