34953 matches found
Exploit for CVE-2026-18464
CVE-2026-18464 — WP Maps Pro This repository is intended as a...
CVE-2026-93534
A vulnerability was identified in spatie Scotty up to 1.4.2. Affected is the function SelfUpdater::update of the file app/Updater/SelfUpdater.php of the component Self Update Handler. Such manipulation leads to download of code without integrity check. It is possible to launch the attack remotely...
CVE-2026-93533 spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection
A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command...
CVE-2026-93533
A vulnerability was determined in spatie Scotty up to 1.4.4. This impacts the function DoctorCommand::checkSshConnectivity/DoctorCommand::checkRemoteTools of the file app/Commands/DoctorCommand.php of the component Doctor Command Handler. This manipulation of the argument host causes os command...
CVE-2026-93532 gedelumbung HospitalManagement Password Change password.php simpan improper authentication
A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affects the function application/modules/global/controllers/password.php::simpan/application/modules/global/controllers/profil.php::simpan of the file...
CVE-2026-93532 gedelumbung HospitalManagement Password Change password.php simpan improper authentication
A security vulnerability has been detected in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This issue affects the function application/modules/global/controllers/password.php::simpan/application/modules/global/controllers/profil.php::simpan of the file...
EUVD-2026-82985
WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device control handler that fails to validate the volume context before use. An unprivileged local user can trigger a denial of service by opening the WinFsp control device and issuing...
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.catboost:catboost-spark_3.4_2.12 (>=1.2, <=1.2.10) +3704 more potentially affected by CVE-2026-93578 via io.netty:netty-handler-ssl-ocsp (>=4.1.86.final, <=4.1.137.final)
io.netty:netty-handler-ssl-ocsp MAVEN version =4.1.86.final, =0.0.1, =1.2, =1.2, =1.2.3, =1.2.3, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =3.30.1.1, =3.10.0.5, =0.2.3.5, =3.12.0.1 -...
ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +959 more potentially affected by CVE-2026-93578 via io.netty:netty-handler-ssl-ocsp (>=4.2.0.final, <=4.2.17.final)
io.netty:netty-handler-ssl-ocsp MAVEN version =4.2.0.final, =4.2.17.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-handler-ssl-ocsp and may be impacted: - ai.catboost:catboost-spark4.02.13 1.2.10 - ai.catboost:catboost-spark4.12.1...
CVE-2026-93578 Io.netty/netty-handler-ssl-ocsp: netty: missing extended key usage (eku) check in ocsp client allows certificate revocation bypass
A flaw was found in Netty's Online Certificate Status Protocol OCSP Client. The client fails to verify the 'id-kp-OCSPSigning' Extended Key Usage EKU in OCSP responder certificates. A remote attacker, holding any valid certificate issued by the same Certificate Authority CA, can exploit this by...
CVE-2026-93578
CVE-2026-93578 affects the Netty library, specifically the netty-handler-ssl-ocsp module. The vulnerability stems from a missing Extended Key Usage (EKU) check in the OCSP client, which allows an attacker to perform a certificate revocation bypass . An OCSP response signed with a certificate lack...
DEBIAN-CVE-2026-93493
A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...
UBUNTU-CVE-2026-93493
A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...
CVE-2026-93493
A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...
CVE-2026-93493
A flaw was found in Netty's "netty-handler-ssl-ocsp" component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional "nextUpdate" field. This omission causes the OCSP validation to be silently skipped, leading to...
ac.intave:cloud-protocol (>=0.0.1, <=0.0.11), ai.catboost:catboost-spark_3.4_2.12 (>=1.2, <=1.2.10) +3704 more potentially affected by CVE-2026-93493 via io.netty:netty-handler-ssl-ocsp (>=4.1.86.final, <=4.1.137.final)
io.netty:netty-handler-ssl-ocsp MAVEN version =4.1.86.final, =0.0.1, =1.2, =1.2, =1.2.3, =1.2.3, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =3.30.1.1, =3.10.0.5, =0.2.3.5, =3.12.0.1 -...
ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +959 more potentially affected by CVE-2026-93493 via io.netty:netty-handler-ssl-ocsp (>=4.2.0.final, <=4.2.17.final)
io.netty:netty-handler-ssl-ocsp MAVEN version =4.2.0.final, =4.2.17.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty-handler-ssl-ocsp and may be impacted: - ai.catboost:catboost-spark4.02.13 1.2.10 - ai.catboost:catboost-spark4.12.1...
CVE-2026-93493 Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate field
A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...
CVE-2026-93493 Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate field
A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...
EUVD-2026-82770
A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...