AlmaLinux 9.6 [TuxCare] Security Update: mutt (ALMALINUX9.6:CLSA-2026:1783694989)

The AlmaLinux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783694989 advisory. - In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from th...

Rocky Linux 9.6 [TuxCare] Security Update: mutt (ALMALINUX9.6:CLSA-2026:1783694989)

The Rocky Linux 9.6 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783694989 advisory. - In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from...

Rocky Linux 9 [CIQ] Security Update: buildah / buildah-debuginfo / buildah-debugsource / buildah-tests / etc (crlsa-2026_19186)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202619186 advisory. github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption JWE object CVE-2026-34986 Tenable has...

USTP-Secure

USTP USTP means UDP Speedy Transmission Protocol. USTP keeps the same authenticated transport model, but the project name is now simply USTP again. By default, USTP uses AEAD for DATA. It also supports an optional negotiated cleartext + HMAC mode for DATA, where payload bytes are visible on the...

CVE-2026-87830

In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XML element path. A remote SOAP peer may therefore send a required element without the expected signature or encryption. Users are recommend...

DEBIAN-CVE-2026-87830

In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XML element path. A remote SOAP peer may therefore send a required element without the expected signature or encryption. Users are recommend...

CVE-2026-87830 Apache WSS4J: Streaming WS-SecurityPolicy validation may skip element-protection checks.

In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XML element path. A remote SOAP peer may therefore send a required element without the expected signature or encryption. Users are recommend...

CVE-2026-75823 WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption

The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to register with a higher privileged role, such as Editor. This affects installations running a PHP build where the sodium extension is...

CVE-2026-75823 WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption

The User Frontend WordPress plugin before 4.3.12 does not prevent tampering with the role assigned by its registration form, allowing unauthenticated users to register with a higher privileged role, such as Editor. This affects installations running a PHP build where the sodium extension is...

StealthCrypter

💀StealthCrypter💀 📜 描述 StealthCrypter 是一款强大且易于使用的加密工具，可帮助您使用 AES-256 加密 保护您的敏感文件和目录。无论您需要保护个人文档还是确保机密数据的安全，CryptShield 都能确保您的文件保持私密且防篡改。 🔑 功能 ✅ AES-256 加密 – 行业标准加密，提供最高安全性。 ✅ 交互式命令行界面 – 无需命令行参数，只需按照提示操作即可。 ✅ 加密和解密文件或目录 – 一次保护多个文件，轻松便捷。 ✅ 安全密钥输入 – 使用哈希密钥增强安全性。 ✅ 进度条 – 实时显示加密/解密进度。 ✅ 处理大文件 –...

Cawdog

CAWODOG – PoC de Protección de IP para IA Industrial Basada en Python CAWODOG Cat World Dominance Group es una prueba de concepto lúdica pero realista para proteger modelos de IA basados en Python desplegados en máquinas industriales sin conexión. La idea central: Tomar un pequeño clasificador de...

PublicSafe

PublicSafe 你的浏览器，你的安全空间 PublicSafe 是一个免费开源浏览器扩展，专注于隐私、加密和用户控制。它提供客户端加密工具，帮助用户在敏感信息离开浏览器之前保护它们。PublicSafe 围绕透明度、安全性、可访问性和社区驱动开发而构建。 该项目遵循隐私优先理念，采用零知识设计、本地密钥管理和开源代码，任何人都可以独立审计。 目标 通过客户端加密保护用户隐私。 让用户完全控制自己的加密密钥。 提供简单、用户友好的安全工具。 通过开源开发保持透明。 通过共享代码库支持现代浏览器。 消除不必要的数据收集和遥测。 为所有人创建可访问的隐私工具。 功能 加密功能...

PT-2026-103130

In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be converted into paths that never match the actual XML element path. A remote SOAP peer may therefore send a required element without the expected signature or encryption. Users are recommend...

CVE-2026-100299

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption...

CVE-2026-100299

Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4 is vulnerable due to the inclusion of a legacy password hash on the serial console . This hash relies on weak DES-based encryption , which may allow for unauthorized access via physical means. No specific exploit information or remediation steps are...

CVE-2026-100299 Use of Weak Credentials in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption...

EUVD-2026-89408

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption...

CVE-2026-100299 Use of Weak Credentials in Anjvision YSSD-RTMP-H5

In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy password hash on the serial console that relies on a weak DES‑based encryption...

EmbedPayloadInPng

EmbedPayloadInPng Incrusta una carga útil dentro de un archivo PNG dividiendo la carga útil en múltiples secciones IDAT. Cada sección se cifra individualmente con su propia clave de 16 bytes mediante el algoritmo de cifrado RC4. Enlaces rápidos Inicio de Maldev Academy Plan de estudios de Maldev...

poc-cribl-rce

Descargo de responsabilidad Esto es solo con fines informativos/educativos. Esto se ha elaborado para demostrar una inseguridad en la herramienta, de modo que el proveedor pueda verificar una corrección. Información Probado en Cribl v1.5.0 - Las versiones anteriores no se probaron, pero...