CVE-2023-33668

CVE-2023-33668 Summary DigiExam is a surveillance exam and proctoring software. The software is installed in schools' or students' computers. When the student joins an exam, DigiExam will: ensure it's not running in a Virtual Machine, terminate all applications, fullscreen itself, and prevent the...

collision-webshell

Webshell Collision This repository contains 2 files that have the same MD5 hash: webshell.php normal.php MD5 for the files: $ md5sum .php b719a17ae091ed45fb874c15b2d9663f normal.php b719a17ae091ed45fb874c15b2d9663f webshell.php Hexdump for the webshell.php: $ hexdump -C webshell.php 00000000 3c 3...

CVE-2019-13496

CVE-2019-13496 Exploit Title: OTP bypass Filed Integrity check Date: 07/10/2019 Exploit Author: Furqan Khan Vendor Homepage: https://www.oneidentity.com/ Software Link: https://www.oneidentity.com/products/cloud-access-manager/ Version: 8.1.3 Tested on: Kali Linux , Windows 7 ,Ubantu 16.04 To...

meesho-android-improper-encryption-cve-2026-5682

🔐 Proof of Concept: Meesho Android App – Insecure Cryptographic Implementation AES-CBC without Integrity + Weak Key Derivation Author: Soyam Arya aka honestcorrupt Date of Discovery: March 2026 Affected App: Meesho Android App com.meesho.supply Status: Under Verification Category: Insufficient...

EUVD-2026-113341

Forge: PKCS12 MAC forgery and constant-key PBE via zero iteration count...

CVE-2026-118782

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS12 MAC or PKCS12 password-based encryption iteration count of zero or less. pki.pbe.generatePkcs12Key then returned a constant key independent of the passwo...

CVE-2026-118782

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS12 MAC or PKCS12 password-based encryption iteration count of zero or less. pki.pbe.generatePkcs12Key then returned a constant key independent of the passwo...

CVE-2026-118782

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS12 MAC or PKCS12 password-based encryption iteration count of zero or less. pki.pbe.generatePkcs12Key then returned a constant key independent of the passwo...

CVE-2026-118782: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS12 MAC or PKCS12 password-based encryption iteration count of zero or less. pki.pbe.generatePkcs12Key then returned a constant key independent of the passwo...

CVE-2026-90720

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity Check Value...

CVE-2026-90720

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity Check Value...

EUVD-2026-111824

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity Check Value...

CVE-2026-90720

Dell PowerProtect Data Domain affects several release versions, including Feature Release 7.7.1.0 through 8.8 , LTS2024 (7.13.1.0 through 7.13.1.80 ), LTS2025 (8.3.1.0 through 8.3.1.40 ), and LTS2026 (8.6.1.0 through 8.6.1.20 ). The software is vulnerable to an Improper Validation of Integrity Ch...

CVE-2026-90720

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity Check Value...

PT-2026-127908

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1.40, LTS2026 release versions 8.6.1.0 through 8.6.1.20, contain an Improper Validation of Integrity Check Value...

CVE-2026-116608

A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function loadpretrainedmodel of the file videollama2/model/init.py of the component Model Loading. The manipulation of the argument nameorpath leads to improper validation of integrity...

CVE-2026-116608 DAMO Academy VideoLLaMA2 Model Loading __init__.py load_pretrained_model integrity check

A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function loadpretrainedmodel of the file videollama2/model/init.py of the component Model Loading. The manipulation of the argument nameorpath leads to improper validation of integrity...

CVE-2026-116608 DAMO Academy VideoLLaMA2 Model Loading __init__.py load_pretrained_model integrity check

A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function loadpretrainedmodel of the file videollama2/model/init.py of the component Model Loading. The manipulation of the argument nameorpath leads to improper validation of integrity...

EUVD-2026-110566

A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function loadpretrainedmodel of the file videollama2/model/init.py of the component Model Loading. The manipulation of the argument nameorpath leads to improper validation of integrity...

CVE-2026-116608

A security vulnerability exists in DAMO Academy VideoLLaMA2 versions up to 1.1 within the Model Loading component. Specifically, the load_pretrained_model function in videollama2/model/__init__.py fails to properly validate the integrity check value when the _name_or_path argument is manipulated....