CVE-2025-5777

CVE-2025-5777 AKA CitrixBleed 2 Soit une lecture hors limites OOB dans le processus de connexion de Citrix Gateway. Ceci est une preuve de concept exploitant cette vulnérabilité OOB CVE-2025-5777 pour obtenir des données mémoire d'une instance Citrix Gateway vulnérable, pouvant mener au vol de...

CVE-2021-33044

CVE-2021-33044 Exploitation de contournement d'authentification pour les appareils Dahua IPC/VTH/VTO À propos : La vulnérabilité de contournement d'authentification identitaire découverte dans certains produits Dahua lors du processus de connexion. Les attaquants peuvent contourner...

CVE-2021-43650

CVE-2021-43650 Webrun = 3.6.0.42 SQLi Description Webrun est une application de gestion basée sur le web. Dans la version 3.6.0.42, il a été possible d'identifier et de rapporter une vulnérabilité d'injection SQL qui survient lors du processus de connexion, plus précisément nous injecterons la...

CVE-2021-33044

CVE-2021-33044 Dahua IPC/VTH/VTO exploit de contournement d'authentification des dispositifs À propos : La vulnérabilité de contournement de l'authentification d'identité trouvée dans certains produits Dahua lors du processus de connexion. Les attaquants peuvent contourner l'authentification...

CVE-2017-7921-EXPLOIT

CVE-2017-7921 - Vulnérabilité d'authentification impropre dans les séries de caméras Hikvision Une faille de sécurité identifiée comme CVE-2017-7921, qui affecte divers modèles de caméras Hikvision. La vulnérabilité a été découverte dans les appareils des séries DS-2CD2xx2F-I V5.2.0 build 140721 ...

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login credentials to run code as root on those servers over the network. The Security Management Server is the system that controls firewall policy and administrator access. Check Point h...

EUVD-2026-80699

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges...

CVE-2026-91843 Stack overflow in login process to the Security Management and Log Servers

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges...

CVE-2026-91843

CheckPoint Security Management and Log Servers are affected by a stack overflow in the unauthenticated login process , which may allow a remote attacker to execute arbitrary code with root privileges . The vulnerability is rated CVSS 9.8 (Critical) with a network attack vector requiring no privil...

CVE-2026-91843 - Stack overflow in login process to the Security Management and Log Servers

Symptoms - Issue: A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges. This issue received the ID CVE-2026-91843 and a CVSS score of 9.8. Affected Products: Security Management Server, Multi-Domain Security Management...

Astra Linux – Vulnerability in xrdp

xrdp is an open-source RDP server. Versions up to 0.10.5 contain a heap-based buffer overflow vulnerability in its login process. In environments where domainuserseparator is configured in xrdp.ini, an unauthenticated remote attacker can send a crafted, excessively long username and domain name,...

CVE-2026-42395

A flaw was found in Dovecot. A remote attacker, if able to send forwarding information from a host configured as a trusted proxy, could send a NUL byte that crashes the login process. This termination of the login process can lead to a denial of service for user logins. Mitigation To mitigate thi...

SUSE CVE-2026-42395

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

Linux Distros Unpatched Vulnerability : CVE-2026-42395

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The logi...

Linux Distros Unpatched Vulnerability : CVE-2026-52687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker that has valid credentials can select a compression algorithm for the IMAP connection whose decompression state requires a large amount of memory, a...

AZL-98265 CVE-2026-42395 affecting package dovecot 2.3.20-1

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

ALPINE-CVE-2026-42395

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

CVE-2026-42395

A host listed as a trusted proxy can send forwarding information containing a NUL byte, which crashes the login process on the following login attempt. The login process is terminated, which can cause degradation or denial of service for logins. Deployments that do not configure trusted proxies a...

CVE-2026-33605

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...

AZL-98259 CVE-2026-33605 affecting package dovecot 2.3.20-1

An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. If running in high-security mode default for community releases, only the attacker's own connection is terminated. If running in high-performance mode default for Pro...