IServ Schoolserver User Enumeration

IServ Schoolserver suffers from a user enumeration vulnerability. The vendor does not feel this is an issue...

CVE-2026-18582

A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function ReportingRCBWriteAccessHandler of the file src/iec61850/server/mmsmapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not ...

Important: Red Hat Security Advisory: rhc security update

An update for rhc is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...

crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

A flaw was found in the Go standard library packages crypto/x509 and crypto/tls. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being...

crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

A flaw was found in the crypto/tls package within the Go golang standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock,...

Exploit for CVE-2026-0101

--- CVE-2026-0101 – BLE Address Spoofing via Weak Resolvable...

Exploit for CVE-2026-6060

--- CVE-2026-6060 – QUIC Handshake Amplification via Address...

Exploit for CVE-2026-5050

--- CVE-2026-5050 – Blind LDAP Injection via Unescaped Filte...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Openclaw

--- CVE-2026-4040 – Race Condition in File Upload Leading to...

Exploit for CVE-2026-3030

--- CVE-2026-3030 – Prototype Pollution in JSON Merge Patch...

CY376_-AHENKORA_JOSEPH-

CY376 Red Team Project — Exploiting Known CVEs in a Deliberate...

Exploit for CVE-2026-2020

--- CVE-2026-2020 – SSRF via URL Parser Differential...

Exploit for CVE-2026-5556

--- CVE-2026-5556 – Kubernetes Admission Controller Bypass v...

Exploit for NULL Pointer Dereference in Pgbouncer

--- CVE-2026-6666 – XPC Service NSKeyedUnarchiver Deserializ...

Exploit for CVE-2026-7777

--- CVE-2026-7777 – Rust Use‑After‑Free in Unsafe Web Server...

Exploit for Inefficient Regular Expression Complexity in Securly

--- CVE-2026-8888 – Printer Firmware Unsigned Update via HTT...

Exploit for Path Traversal in Publiccms

--- CVE-2026-1111 – Smart Contract Cross‑Function Reentrancy...

CVE-2026-65875

BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a user downloads and opens a CSV file containing malicious code injected by an attacker, the malicious code may be executed...

CVE-2026-18581

A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input 9|9| can lead to reachable assertion. The attack requires...