Elph Mobile Unverified Code Upload

The vulnerability in the Elph Mobile unified communications platform is related to code loading without proper integrity checks. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and integrity of protected information...

RHLW-2026-79EC677D4C215602 Lightwell Security Advisory: jsch 0.2.1.rhlw-00005

Red Hat Lightwell has released com.github.mwiede:jsch 0.2.1.rhlw-00005 with a backported security fix. CVE-2023-48795: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some...

freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication

A flaw was found in FreeRDP. An out-of-bounds write vulnerability in the server-side NT LAN Manager NTLM authentication path can result in a Denial of Service DoS. When processing authentication messages with hash callbacks enabled, FreeRDP fails to properly validate the Message Integrity Check M...

freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication

A flaw was found in FreeRDP. An out-of-bounds write vulnerability in the server-side NT LAN Manager NTLM authentication path can result in a Denial of Service DoS. When processing authentication messages with hash callbacks enabled, FreeRDP fails to properly validate the Message Integrity Check M...

collision-webshell

Webshell Collision This repository contains 2 files that have the same MD5 hash: webshell.php normal.php MD5 for the files: $ md5sum .php b719a17ae091ed45fb874c15b2d9663f normal.php b719a17ae091ed45fb874c15b2d9663f webshell.php Hexdump for the webshell.php: $ hexdump -C webshell.php 00000000 3c 3...

EUVD-2026-122957

Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion. This issue affects N-central: through 24.6.1...

CVE-2026-125958

Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion. This issue affects N-central: through 24.6.1...

meesho-android-improper-encryption-cve-2026-5682

🔐 Proof of Concept: Meesho Android App – Insecure Cryptographic Implementation AES-CBC without Integrity + Weak Key Derivation Author: Soyam Arya aka honestcorrupt Date of Discovery: March 2026 Affected App: Meesho Android App com.meesho.supply Status: Under Verification Category: Insufficient...

PT-2026-144754

Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion. This issue affects N-central: through 24.6.1...

CVE-2026-125958: N-able N-central: Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion

Download of code without integrity check vulnerability in N-able N-central allows Remote Code Inclusion. This issue affects N-central: through 24.6.1...

CVE-2026-120423

undici is an HTTP client for Node.js. In versions 7.15.0 through 7.30.1 and 8.0.0 through 8.12.3, fetch verifies Subresource Integrity metadata by splitting the integrity string on a single space, but the SRI grammar separates metadata by ASCII whitespace, which also includes the horizontal tab. ...

CVE-2023-33668

CVE-2023-33668 Summary DigiExam is a surveillance exam and proctoring software. The software is installed in schools' or students' computers. When the student joins an exam, DigiExam will: ensure it's not running in a Virtual Machine, terminate all applications, fullscreen itself, and prevent the...

CVE-2019-13496

CVE-2019-13496 Exploit Title: OTP bypass Filed Integrity check Date: 07/10/2019 Exploit Author: Furqan Khan Vendor Homepage: https://www.oneidentity.com/ Software Link: https://www.oneidentity.com/products/cloud-access-manager/ Version: 8.1.3 Tested on: Kali Linux , Windows 7 ,Ubantu 16.04 To...

Linux Distros Unpatched Vulnerability : CVE-2026-120423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici is an HTTP client for Node.js. In versions 7.15.0 through 7.30.1 and 8.0.0 through 8.12.3, fetch verifies Subresource Integrity metadata by splitting the...

org.bouncycastle/bcprov-jdk15on: Bouncy Castle for Java: Message Authentication Code (MAC) forgery due to a length-dependent Key Derivation Function (KDF) split

A flaw was found in Bouncy Castle for Java. This vulnerability allows for Message Authentication Code MAC forgery in the IESEngine stream-mode. The issue arises from a length-dependent Key Derivation Function KDF split, which an attacker could exploit to bypass integrity checks. This could lead t...

Improper Validation of Integrity Check Value

Overview undici is an An HTTP/1.1 client, written from scratch for Node.js Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value via the fetch function's Subresource Integrity verification logic, which splits the integrity string on a single space rather...

AZL-113233 CVE-2026-120423 affecting package nodejs 24.22.1-1

undici is an HTTP client for Node.js. In versions 7.15.0 through 7.30.1 and 8.0.0 through 8.12.3, fetch verifies Subresource Integrity metadata by splitting the integrity string on a single space, but the SRI grammar separates metadata by ASCII whitespace, which also includes the horizontal tab. ...

DEBIAN-CVE-2026-120423

undici is an HTTP client for Node.js. In versions 7.15.0 through 7.30.1 and 8.0.0 through 8.12.3, fetch verifies Subresource Integrity metadata by splitting the integrity string on a single space, but the SRI grammar separates metadata by ASCII whitespace, which also includes the horizontal tab. ...

CVE-2026-120423

undici is an HTTP client for Node.js. In versions 7.15.0 through 7.30.1 and 8.0.0 through 8.12.3, fetch verifies Subresource Integrity metadata by splitting the integrity string on a single space, but the SRI grammar separates metadata by ASCII whitespace, which also includes the horizontal tab. ...

CVE-2026-85515

A flaw was found in Bouncy Castle. When processing truncated OpenPGP encrypted messages, the library incorrectly treats premature stream termination as a normal end of message and fails to perform required integrity checks. A remote attacker could exploit this flaw by tampering with or truncating...