cve-2026-34486-tomcat_encrypt_bypass_reproduction

CVE-2026-34486: Omisión del EncryptInterceptor de Apache Tomcat...

Telerik_CVE-2019-18935

Escáner Python para TelerikUI telerikrcescan.py Ejemplos Evaluar una IP para CVE-2019-18935 $ python3 telerikrcescan.py -t 192.168.44.21 Evaluar un nombre de host para CVE-2019-18935 $ python3 telerikrcescan.py -t vulnerable.telerik.net Evaluar un rango de red CIDR para CVE-2019-18935 $ python3...

CVE-2024-20666

CVE-2024-20666 漏洞补丁指南 欢迎访问本仓库，旨在解决 Windows 恢复环境 WinRE 中 CVE-2024-20666 漏洞补丁安装失败的问题。 概述 本仓库提供解决与 Windows 操作系统更新 KB5034441 相关的补丁安装失败的资源和说明。该更新修复了一个被标识为 CVE-2024-20666 的关键安全漏洞，攻击者可能通过利用 WinRE 绕过 BitLocker 加密。 已识别的问题 许多用户在尝试安装 KB5034441 更新时报告了失败。主要原因是 Windows 恢复分区磁盘空间不足，导致安装过程失败并显示错误代码 0x80070643。...

CVE-2025-63579

CVE-2025-63579 Acceso no autorizado a todos los nombres de usuario y contraseñas introducidos en la función de Agenda de direcciones presente en las impresoras Kyocera Command Center RX. Descripción El uso no autorizado de impresoras Kyocera permite exportar toda la información almacenada en la...

CVE-2023-30367-mRemoteNG-password-dumper

mRemoteNG = v1.77.3.1784-NB 密码转储工具 CVE-2023-30367 Multi-Remote Next Generation Connection Manager mRemoteNG 是一款免费软件，允许用户存储和管理多协议连接配置，以远程连接到系统。 mRemoteNG 配置文件可以以加密状态存储在磁盘上。mRemoteNG 版本 = v1.76.20 及 = 1.77.3-dev...

CVE-2026-45057

A flaw was found in matrix-sdk-ui. The component's message edit validation logic does not properly enforce encryption for replacement events, even when the original message was encrypted. This vulnerability allows a malicious homeserver administrator, or an attacker with similar capabilities, to...

CVE-2026-81821

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to decrypt and view sensitive information...

AZL-99669 CVE-2026-80806 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...

EUVD-2026-71241

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...

CVE-2026-80806

CVE-2026-80806 is a flaw in the Linux kernel's ext4 filesystem where newly created encrypted files could incorrectly have the DAX (Direct Access) flag enabled when the filesystem is mounted with -o dax=always. The root cause is a timing issue in __ext4_new_inode(): the call to ext4_set_inode_flag...

CVE-2026-80806 ext4: don't enable DAX on new encrypted files

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...

PT-2026-85647

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4 set inode flagsinode, init=true in ext4 new inode is made before EXT4 INODE ENCRYPT is set. As a result, it c...

Linux Distros Unpatched Vulnerability : CVE-2026-80806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in...

EUVD-2025-210713

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

CVE-2025-59322

CPSD CryptoPro Secure Disk for BitLocker is affected, specifically versions before v7.7.4. The issue arises from improper handling of decryption errors, allowing encrypted volumes to be mounted as plaintext. The CVE details indicate a high-severity impact (Confidentiality impact: High) with no us...

CVE-2025-59322

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext...

PT-2026-70187

Name of the Vulnerable Software and Affected Versions LOGO! Soft Comfort versions prior to V9 Description Products use a static, hardcoded AES master key to encrypt project files. A local attacker could extract this master key from the application files or memory to decrypt project files or remov...

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency CISA, on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-9198 CVSS score: 9.8 - A code injection...

Oracle Linux 10 : tomcat (ELSA-2026-18537)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18537 advisory. - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Paddi...

tomcat security update

1:10.1.49-3 - Related: RHEL-168577 Remove unnecessary patch 1:10.1.49-2 - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomca...