21022 matches found
CVE-2026-63569
Improper input validation in DHAgreement.CalculateAgreement MTI/A0 two-pass Diffie-Hellman in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an on-path attacker to make the local party compute an agreed value the attacker already knows, defeating the key authentication MTI/A0 is...
CVE-2026-63569
The bc-csharp library by Legion of the Bouncy Castle Inc. (versions before 2.7.0 ) is vulnerable to improper input validation in the DHAgreement.CalculateAgreement function during MTI/A0 two-pass Diffie-Hellman key exchanges. An on-path attacker can provide a crafted out-of-range or small-order e...
CVE-2026-63569 MTI/A0 DHAgreement does not validate the peer's ephemeral value
Improper input validation in DHAgreement.CalculateAgreement MTI/A0 two-pass Diffie-Hellman in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an on-path attacker to make the local party compute an agreed value the attacker already knows, defeating the key authentication MTI/A0 is...
CVE-2026-63569 MTI/A0 DHAgreement does not validate the peer's ephemeral value
Improper input validation in DHAgreement.CalculateAgreement MTI/A0 two-pass Diffie-Hellman in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an on-path attacker to make the local party compute an agreed value the attacker already knows, defeating the key authentication MTI/A0 is...
CVE-2026-47547
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause improper input validation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...
Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Input Validation (CVE-2026-43216)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid506011; scriptversion"1.1"; scriptsetattributeattribute:"pluginmodificationdate",...
PT-2026-104107
Improper input validation in DHAgreement.CalculateAgreement MTI/A0 two-pass Diffie-Hellman in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows an on-path attacker to make the local party compute an agreed value the attacker already knows, defeating the key authentication MTI/A0 is...
CVE-2026-47542
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper input validation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure,...
Security Bulletin: IBM i is Affected by an Improper Validation Vulnerability in zlib [CVE-2026-27171]
Summary Zlib for IBM i is vulnerable to increased CPU consumption when using functions crc32combine64 and crc32combine64gen64 CVE-2026-27171 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-27171 DESCRIPTION: zlib before 1.3.2 allows CPU consumption via...
CVE-2026-0848
CVE-2026-0848 — NLTK StanfordSegmenter: 신뢰할 수 없는 JAR 로딩을 통한 임의 코드 실행 -red?style=for-the-badge -brightgreen?style=for-the-badge 개요 필드| 세부 정보 ---|--- CVE ID| CVE-2026-0848 패키지| nltk Natural Language Toolkit 레지스트리| PyPI 영향받는 버전| = 3.9.2 취약점 유형| CWE-20: 부적절한 입력 검증 CVSS 점수| 10.0 Critical 공격 경로| 네트워크 공...
CVE-2026-47542
A flaw was found in the NVIDIA GPU display driver. A local attacker with high privileges can trigger this vulnerability by supplying crafted input to the kernel-mode driver layer due to improper input validation. A successful exploit may allow the attacker to achieve arbitrary code execution,...
CVE-2026-0848-PoC-Improper-Input-Validation
CVE-2026-0848 - NLTK StanfordSegmenter RCE PoC ⚠️ 警告 此代码会在你的系统上执行任意命令。仅在虚拟机或隔离容器中使用。 描述 CVE-2026-0848 的功能性 PoC。演示了恶意 JAR 文件在被 NLTK 加载时如何执行任意代码。 要求 Python 3.8+ Java JDK 8+（用于编译 payload） NLTK 3.9.2（将自动安装） 安装与执行 克隆 git clone https://github.com/tu-usuario/CVE-2026-0848-PoC.git cd CVE-2026-0848-PoC 安装依...
CVE-2025-31980
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems...
EUVD-2025-211022
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems...
CVE-2025-31980 HCL BigFix Service Management is affected by multiple security vulnerabilities.
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the application, enabling potential injection attacks or errors in downstream processing systems...
CVE-2025-31980
HCL BigFix Service Management is affected by an Improper Input Validation vulnerability. This flaw could allow an attacker to inject unvalidated, malformed data into the application, potentially leading to injection attacks or causing errors in downstream processing systems . No specific affected...
CVE-2025-60012-POC
교육 및 보안 연구 목적으로만 사용하십시오. 귀하가 소유하지 않거나 테스트에 대한 명시적 서면 허가를 받지 않은 시스템에 사용하지 마십시오. →전체 면책 조항 CVE-2025-60012 — Apache Livy 무단 파일 접근 -yellow 개요 필드| 세부 정보 ---|--- CVE ID| CVE-2025-60012 심각도| 중간 CVSS 6.3 영향을 받는 버전| Apache Livy 0.7.0-incubating, 0.8.0-incubating — Apache Spark 3.1 이상에 연결된 경우 수정 버전| Apache...
CVE-2026-103063
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Wpmet ElementsKit Elementor addons Lite elementskit-lite allows Stored XSS.This issue affects ElementsKit Elementor addons Lite: from n/a through 4.0.6...
CVE-2026-102394 WordPress Essential Addons for Elementor plugin <= 6.8.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPDeveloper Essential Addons for Elementor essential-addons-for-elementor-lite allows Stored XSS.This issue affects Essential Addons for Elementor: from n/a through 6.8.4...