CVE-2026-85719 AsyncHttpClient: SOCKS proxy credentials sent to the origin server over plaintext HTTP

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.1.0 until 2.16.1 and 3.0.12, requests using an authenticated SOCKS proxy can expose the proxy's credentials to the origin because NettyRequestFactory and...

CVE-2026-85719

AsyncHttpClient (AHC) , a Java library for asynchronous HTTP requests, contains a credential-exposure flaw in its SOCKS proxy handling. NettyRequestFactory and NettyRequestSender attach the Proxy-Authorization header without verifying the request is actually being sent to an HTTP proxy, so creden...

dotnet10.0: dotnet9.0: .NET Elevation of Privilege Vulnerability

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-80356

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2025-9074-Docker-Desktop-Container-Escape

CVE-2025-9074: Docker Desktop 컨테이너 탈출 PoC CVE-2025-9074 에 대한 개념 증명 익스플로잇 - Docker Desktop에서 인증 없이 Docker Engine API에 접근할 수 있는 중요한 컨테이너 탈출 취약점입니다. 취약점 개요 속성| 값 ---|--- CVE ID| CVE-2025-9074 CVSS 점수| 9.3 심각 영향받는 소프트웨어| Docker Desktop 4.44.3 영향받는 플랫폼| Windows, macOS Linux 영향 없음 수정 버전| Docker Desktop...

CVE-2026-63461 Vendure: Shop API list queries can return non-public entities when filterOperator is OR

Vendure is an open-source headless commerce platform. Prior to 3.6.5, the public Shop API products, collections, and facets queries combine mandatory visibility guards with caller-supplied filters using the caller-controlled filterOperator. When filterOperator is OR, a predicate matching a hidden...

CVE-2026-63472 Vendure: External-authentication account takeover: external login linked to a pre-existing account by email without verification

Vendure is an open-source headless commerce platform. Prior to 3.7.0, ExternalAuthenticationService.createCustomerAndUser in packages/core/src/service/helpers/external-authentication/external-authentication.service.ts selects an existing customer user by emailAddress and attaches a newly presente...

CVE-2026-80356

Dell OpenManage Server Administrator (OMSA) , versions prior to 11.1.0.3 , is affected by an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low-privileged attacker with local access can exploit this flaw to expose sensitive information. The vulnerability is rated CVSS...

EUVD-2026-81666

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2026-81829

CVE-2026-81829 is a same-origin SSRF vulnerability in SmallRye JWT 's AwsAlbKeyResolver , used by applications (e.g., Quarkus) to verify JWTs signed by AWS Application Load Balancers. The root cause is that the resolver constructs the key-fetch URL by directly concatenating the attacker-controlle...

CVE-2026-92960

vm2 (a Node.js sandboxing library) versions before 3.11.6 fail to restrict access to the os and dns builtins when configured with builtin: ['*']. This allows sandboxed code to read the host process identity and network topology . Critically, an attacker can invoke dns.setServers() to hijack the h...

CVE-2026-92960 vm2 before 3.11.6 Process-wide State Exposure via os and dns

vm2 before 3.11.6 fails to restrict access to os and dns builtins under the builtin: '' configuration, allowing sandbox code to read host process identity and network topology. Attackers can invoke dns.setServers to hijack the host process DNS resolver globally, redirecting all subsequent host DN...

CVE-2026-92940 vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent

vm2 versions 3.11.3 through 3.11.6 expose the host process's real https.globalAgent to sandboxed code when a NodeVM is explicitly configured to allow require'https'. The builtin loader wraps host modules in a read-only proxy, but method calls such as Agent.prototype.on are forwarded to the...

CVE-2026-92940

vm2 versions 3.11.3 through 3.11.6 expose the host process's real https.globalAgent to sandboxed code when a NodeVM is configured to allow require('https'). Although the builtin loader wraps host modules in a read-only proxy, method calls such as Agent.prototype.on() are forwarded to the underlyi...

CVE-2026-92940 vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent

vm2 versions 3.11.3 through 3.11.6 expose the host process's real https.globalAgent to sandboxed code when a NodeVM is explicitly configured to allow require'https'. The builtin loader wraps host modules in a read-only proxy, but method calls such as Agent.prototype.on are forwarded to the...

aws-perimeter

aws-perimeter Терминальный AWS Security Scanner с 100+ проверками безопасности по VPC, IAM, S3, CloudTrail, контейнерам ECS/EKS и обнаружением AI-атак. Обнаруживает опасные разрешения IAM, раскрытые секреты, неправильно настроенные S3-бакеты, уязвимости контейнеров и новые угрозы LLMjacking. Обзо...

CVE-2025-65900

CVE-2025-65900: Kalmia CMS v0.2.0 — уязвимость к некорректному контролю доступа Обзор уязвимости CVE ID: CVE-2025-65900 Продукт: DifuseHQ Kalmia CMS Затронутая версия: 0.2.0 Тип уязвимости: Некорректный контроль доступа Необходимые привилегии: Низкие учётная запись только для чтения Влияние Эта...

CVE-2014-3120

LAB 10-CVE-2014-3120 I. АНАЛИЗ СИСТЕМЫ Определение поверхности атаки из окружения Docker Начнём с того, что запущено в окружении. Выведем список всех активных контейнеров: root@kitploit: docker ps Результат: Контейнер p1/lab10:latest запущен, наружу открыты 2 порта : Сопоставление портов| Протоко...

CVE-2026-92916

Grav is a flat-file CMS. In Grav 1.7.0 through 1.7.53.2 and 2.0.0 through 2.0.21, when the debugger is enabled system.debugger.enabled: true, which is not the default, the Clockwork profiler endpoint is exposed without authentication: InitializeProcessor::handleDebuggerRequest intercepts any path...

CYBERDUDEBIVASH-Cisco-AsyncOS-CVE-2025-20393-Scanner

CYBERDUDEBIVASH Cisco AsyncOS CVE-2025-20393 Сканер Авторские права © 2026 CYBERDUDEBIVASH ECOSYSTEM – Все права защищены Авторизовано в рамках CYBERDUDEBIVASH AUTHORITY – Этичный инструмент обнаружения для CVE-2025-20393 неаутентифицированная RCE в Cisco Secure Email Gateway / SMA. Этот инструме...