Lucene search
+L

9136 matches found

OSV
OSV
added 2026/09/01 10:25 p.m.4 views

CVE-2026-84479 WWBN AVideo Authentication Bypass via User-Agent Header

WWBN AVideo current e01e41ecc and earlier makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder/isAVideoMobileApp checks match HTTPUSERAGENT against a hardcoded literal "AVideoEncoder"/"AVideoMobileApp" with no IP check or shared...

9.3CVSS5.9AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/01 9:49 p.m.6 views

log4j2-vuln-lab

⚠️ Disclaimer : This project is intended for security learning and technical research only. All vulnerability environments are set up locally, and no real targets have been tested. Do not use it for illegal purposes. The risk of using this project is borne by the user. Log4j2 Vulnerability...

10CVSS7.3AI score0.99999EPSS
SaveExploits368
Kitploit
Kitploit
added 2026/09/01 5:13 p.m.7 views

AiSOC

AiSOC Un SOC de IA de código abierto y autoalojable. Los prompts del agente, las llamadas a herramientas y su razonamiento se registran paso a paso y son reproducibles. Con licencia MIT...

6AI score
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/01 2:02 p.m.6 views

CVE-2026-59827

Herramienta autorizada de pruebas de penetración para Metabase CVE-2026-59827 Una utilidad de evaluación de seguridad autorizada para validar la presencia de CVE-2026-59827 en implementaciones de Metabase durante proyectos aprobados de pruebas de penetración. Esta herramienta está diseñada para...

9.9CVSS8.1AI score0.03247EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/01 12:08 p.m.172 views

santa

Santa Santa is a binary and file access authorization system for macOS. It consists of a system extension that monitors for executions & file access, and makes decisions based on the contents of a local database, a GUI agent that notifies the user in case of a block decision, a background service...

6.1AI score
SaveExploits0References9
NVD
NVD
added 2026/08/31 9:17 a.m.13 views

CVE-2026-82863

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...

8.7CVSS0.00145EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/31 8:46 a.m.17 views

CVE-2026-82863

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. An attacker with appropriate access can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring....

8.7CVSS5.9AI score0.00145EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/31 8:46 a.m.7 views

EUVD-2026-68451

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...

8.7CVSS5.9AI score0.00145EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/31 8:46 a.m.5 views

CVE-2026-82863 @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection

@hulumi/baseline versions before 1.3.2 fail to fully detect CloudTrail selector tampering events, reducing audit logging configuration change coverage. Attackers can modify CloudTrail event selectors without complete detection, potentially evading audit trail monitoring...

8.7CVSS5.9AI score
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/08/31 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-18702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the enti...

6.4CVSS5.9AI score0.00209EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/29 5:17 p.m.7 views

UBUNTU-CVE-2026-82474

Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...

8.5CVSS5.9AI score0.00131EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/08/28 10:26 p.m.13 views

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

Summary The AUSF component of free5GC compares authentication response values with normal Go equality helpers instead of constant-time cryptographic comparison functions. Two authentication flows are affected in internal/sbi/processor/ueauthentication.go: 1. 5G-AKA confirmation compares RES and...

8.7CVSS6.8AI score0.00652EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/08/28 10:26 p.m.11 views

GHSA-FP46-6VFW-GC9C free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

Summary The AUSF component of free5GC compares authentication response values with normal Go equality helpers instead of constant-time cryptographic comparison functions. Two authentication flows are affected in internal/sbi/processor/ueauthentication.go: 1. 5G-AKA confirmation compares RES and...

3.7CVSS6AI score0.00284EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/28 10:25 p.m.40 views

CVE-2026-55785 free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ueauthentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedure compares RES and XRES with...

3.7CVSS0.00284EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/28 10:25 p.m.16 views

EUVD-2026-68017

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ueauthentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedure compares RES and XRES with...

3.7CVSS5.9AI score0.00284EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/28 8:16 a.m.15 views

CVE-2026-80704

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...

0.00159EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/08/28 6:53 a.m.13 views

CVE-2026-80704

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...

5.8AI score0.00159EPSS
SaveExploits0
OSV
OSV
added 2026/08/28 6:53 a.m.13 views

CVE-2026-80704 drm/amd/display: use proper context for logging

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use proper context for logging The same as the rest of the code, getssinfofromatombios uses calcpllcs-ctx-logger for logging. But calcpllcs-ctx is initialized only later in calcpllmaxvcoconstruct. Therefore, any...

5.8AI score
SaveExploits0References7
CVE
CVE
added 2026/08/28 6:52 a.m.24 views

CVE-2026-80689

CVE-2026-80689 affects the Linux kernel in the tracing/mmiotrace subsystem. The root cause is a NULL pointer dereference : when mmio_trace_rw() or mmio_trace_mapping() are invoked while mmio_trace_array is NULL (e.g., before initialization or after the tracer is disabled), the call chain into __t...

5.8AI score0.00168EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/08/28 6:52 a.m.13 views

CVE-2026-80689

In the Linux kernel, the following vulnerability has been resolved: tracing/mmiotrace: Add NULL check for mmiotracearray in logging functions mmiotracerw and mmiotracemapping retrieve mmiotracearray into tr and pass it to tracemmiotracerw and tracemmiotracemap. If these functions are invoked whil...

5.8AI score0.00168EPSS
SaveExploits0
Rows per page
Query Builder