CVE-2026-11936 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 local management interface in certain configurations is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus...

CVE-2026-12109

IBM Security Verify Access (10.0 through 10.0.9.2) and IBM Verify Identity Access (11.0 through 11.0.3) are vulnerable to an unbounded write to a fixed-size stack buffer (CWE-787). This flaw could allow an attacker with administrative privileges and access to the local management interface to exe...

CVE-2026-12109 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer...

CVE-2026-12109 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer...

EUVD-2026-95265

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an attacker with administrative privileges and access to the local management interface to execute arbitrary code due to an unbounded write to a fixed-size stack buffer...

CVE-2026-78407

IBM Security Verify Access (versions 10.0 through 10.0.9.2) and IBM Verify Identity Access (versions 11.0 through 11.0.3) are vulnerable to cross-site scripting (XSS) . An authenticated user can embed arbitrary JavaScript code in the Web UI, potentially altering functionality and leading to crede...

CVE-2026-78407 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...

EUVD-2026-95264

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...

CVE-2026-78407 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading...

xtor

xtor مكتبة بايثون لإدارة مثيلات Tor برمجياً. الميزات تشغيل عمليات Tor جديدة أو الاتصال بعمليات قائمة عملاء httpx مُهيؤون مسبقاً متزامن + غير متزامن مع وكيل SOCKS5 تبديل الهوية مع إمكانية الانتظار حتى الحصول على عنوان IP جديد عزل التدفقات لفصل حركة المرور إدارة الدوائر والتدفقات معلومات عن عقدة...

CVE-2026-106126

A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure SaaS allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe...

CVE-2026-106126 Command Injection

A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure SaaS allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe...

EUVD-2026-95207

A command injection vulnerability in the Active Directory Events Listener of Tenable Identity Exposure SaaS allows an authenticated, low-privileged attacker to execute arbitrary commands as SYSTEM on the PDCe...

CVE-2026-106126

A command injection vulnerability exists in the Active Directory Events Listener of Tenable Identity Exposure (SaaS) . This flaw allows an authenticated, low-privileged attacker to execute arbitrary commands with SYSTEM privileges on the PDCe . The root cause is identified as CWE-78 (Improper Neu...

vault-cve-2026-5006-audit

CVE-2026-5006 toolkit HCSEC-2026-32 أداتان للتعامل مع ثغرة حقن الشرطة المائلة في سياسات Vault المُنمطة: دليل تفاعلي لشرح المشكلة وتحديد نطاقها، وسكربت تدقيق يفحص كتلة حية ويكتب النتائج إلى Markdown. vault-cve-2026-5006-walkthrough.html - دليل تفاعلي ومستقل بذاته للمشكلة...

check-cve-2026-3055-netscaler

فحص CVE-2026-3055 لـ NetScaler SAML IdP أداة مساعدة بلغة Python لفحص أجهزة Citrix NetScaler / NetScaler Gateway بحثًا عن CVE-2026-3055 قراءة زائدة في الذاكرة عند العمل كـ موفّر هوية SAML. يتطابق منطق الكشف مع التوثيق العام من watchTowr Labs. المتطلبات الأساسية Python 3.10+ ينطبق فقط على الأجهزة...

CVE-2026-107361

The Arkime live capture service arkime-live in Malcolm runs with networkmode: host, exposing port 8005 on all network interfaces viewHost=0.0.0.0. Arkime trusts the X-Forwarded-User header from any IP address userAuthIps=::,0.0.0.0/0 and auto-creates users with full access. The passwordSecret is...

SCTT-2026-33-0004-FortiCloud-SSO-Identity-Singularity

SCTT-2026-33-0004: تفرد هوية FortiCloud SSO هذا هو التنفيذ الكامل لمتجه SCTT-0004. 📡 التحليل التقني بينما يركز التخفيف الذي أصدرته Fortinet في 27 يناير 2026 لثغرة CVE-2026-24858 على حظر حسابات محددة مثل [email protected]، فإنه يفشل في معالجة الثغرة الزمنية لآلة حالة SAML. من خلال استخدام...

CTT-Refraction-Vortex-CVE-2026-7731-

CTT-Refraction-Vortex-CVE-2026-7731- في إطار CTT، نعتبر هذا عدم تطابق زمني متزامن بين مزوّد الهوية ومزوّد الخدمة. من خلال حقن نبضة عند تردد \alpha=0.0302011، لا نتجاوز التوقيع—بل نُحدث انكسارًا في النافذة الزمنية بحيث يتحقق التوقيع من حالة مستقبلية. 🏺 CTT-Refraction-Vortex CVE-2026-7731 "الهوية...

CVE-2025-1868

CVE-2025-1868: مختبِر HTTP لتسريب NTLM في Advanced IP Scanner و Advanced Port Scanner تطبيق PHP صغير مُعبأ في Docker يعمل على تحفيز مصافحة NTLM ويستخرج القيم المُدّعاة domain و user و workstation من رسائل NTLM Type 3. إنه لا يتحقق من كلمات المرور. إنه لا يخزّن التحديات. يسجّل فقط الهوية المُدّعاة...