CVE-2023-30367-mRemoteNG-password-dumper

mRemoteNG = v1.77.3.1784-NB 密码转储工具 CVE-2023-30367 Multi-Remote Next Generation Connection Manager mRemoteNG 是一款免费软件，允许用户存储和管理多协议连接配置，以远程连接到系统。 mRemoteNG 配置文件可以以加密状态存储在磁盘上。mRemoteNG 版本 = v1.76.20 及 = 1.77.3-dev...

CVE-2024-20666

CVE-2024-20666 漏洞补丁指南 欢迎访问本仓库，旨在解决 Windows 恢复环境 WinRE 中 CVE-2024-20666 漏洞补丁安装失败的问题。 概述 本仓库提供解决与 Windows 操作系统更新 KB5034441 相关的补丁安装失败的资源和说明。该更新修复了一个被标识为 CVE-2024-20666 的关键安全漏洞，攻击者可能通过利用 WinRE 绕过 BitLocker 加密。 已识别的问题 许多用户在尝试安装 KB5034441 更新时报告了失败。主要原因是 Windows 恢复分区磁盘空间不足，导致安装过程失败并显示错误代码 0x80070643。...

Telerik_CVE-2019-18935

TelerikUI Python 扫描器 telerikrcescan.py 示例 评估 IP 是否存在 CVE-2019-18935 漏洞 $ python3 telerikrcescan.py -t 192.168.44.21 评估主机名是否存在 CVE-2019-18935 漏洞 $ python3 telerikrcescan.py -t vulnerable.telerik.net 评估 CIDR 网络范围是否存在 CVE-2019-18935 漏洞 $ python3 telerikrcescan.py -r 23.253.4.0/24 评估目标列表 $ python3...

cve-2026-34486-tomcat_encrypt_bypass_reproduction

CVE-2026-34486：Apache Tomcat EncryptInterceptor 绕过漏洞...

AZL-99669 CVE-2026-80806 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...

EUVD-2026-71241

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...

CVE-2026-80806

CVE-2026-80806 is a flaw in the Linux kernel's ext4 filesystem where newly created encrypted files could incorrectly have the DAX (Direct Access) flag enabled when the filesystem is mounted with -o dax=always. The root cause is a timing issue in __ext4_new_inode(): the call to ext4_set_inode_flag...

CVE-2026-80806 ext4: don't enable DAX on new encrypted files

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...

Linux Distros Unpatched Vulnerability : CVE-2026-80806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in...

CVE-2025-63579

CVE-2025-63579 未经授权访问京瓷 Command Center RX 打印机“地址簿”功能中输入的所有用户名和密码。 描述 未经授权使用京瓷打印机，可导出京瓷地址簿中存储的所有信息。利用此漏洞可绕过对传入数据进行加密的安全措施，使加密数据能够被解密。密码和其他敏感信息可被获取。 受影响版本 TASKalfa 2552ci TASKalfa 3252ci TASKalfa 2553ci TASKalfa 3253ci TASKalfa 3554ci TASKalfa 4052ci TASKalfa 5052ci TASKalfa 6052ci TASKalfa 7052ci...

EUVD-2025-210713

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped...

CVE-2025-59322

CPSD CryptoPro Secure Disk for BitLocker is affected, specifically versions before v7.7.4. The issue arises from improper handling of decryption errors, allowing encrypted volumes to be mounted as plaintext. The CVE details indicate a high-severity impact (Confidentiality impact: High) with no us...

CVE-2025-59322

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext...

PT-2026-70187

Name of the Vulnerable Software and Affected Versions LOGO! Soft Comfort versions prior to V9 Description Products use a static, hardcoded AES master key to encrypt project files. A local attacker could extract this master key from the application files or memory to decrypt project files or remov...

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited

The U.S. Cybersecurity and Infrastructure Security Agency CISA, on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows - CVE-2026-9198 CVSS score: 9.8 - A code injection...

Oracle Linux 10 : tomcat (ELSA-2026-18537)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-18537 advisory. - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Paddi...

tomcat security update

1:10.1.49-3 - Related: RHEL-168577 Remove unnecessary patch 1:10.1.49-2 - Resolves: RHEL-168577 Remove tomcat clustering JAR from RPM builds Resolves: CVE-2026-29146 tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor Resolves: CVE-2026-34486 tomca...

TencentOS Server 3: tomcat (TSSA-2026:0631)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0631 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

CVE-2026-44722

Summary: CVE-2026-44722 affects pyzipper before 0.4.0, where a Python operator precedence bug in pyzipper/zipfile_aes.py prevented automatic selection of AE-2 during encryption. As a result, entries were written using AE-1 format, which stores the plaintext CRC32 checksum in the ZIP header and, f...

CVE-2026-44722 pyzipper: Encryption bypass for small files encrypted with pyzipper

pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python operator precedence bug in pyzipper/zipfileaes.py caused the AE-2 format to never be automatically selected during encryption, causing encrypted entries to be written in AE-1...