119 matches found
CVE-2018-10933
CVE-2018-10933 - Preuve de Concept de contournement d'authentification SSH Description CVE-2018-10933 est une vulnérabilité de contournement d'authentification dans l'implémentation côté serveur de libssh. La faille permet à un attaquant d'envoyer un message SSH2MSGUSERAUTHSUCCESS sans...
CVE-2026-76784
Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...
CVE-2026-76784 Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices
Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...
EUVD-2026-66641
Multiple TP-Link Kasa smart home devices contain insufficient cryptographic protections in the local device communication protocol. An adjacent network attacker may intercept, replay or forge locally exchanged control messages, potentially resulting in unauthorized device control. Successful...
CVE-2026-76784
Multiple TP-Link Kasa smart home devices are affected by insufficient cryptographic protections in the local device communication protocol. An attacker on an adjacent network can intercept, replay, or forge locally exchanged control messages, leading to unauthorized device control , state manipul...
PT-2026-82235
Name of the Vulnerable Software and Affected Versions TP-Link Kasa affected versions not specified Description Multiple smart home devices have insufficient cryptographic protections in the local device communication protocol. An attacker on the same network can intercept, replay, or forge locall...
Exploit for Improper Isolation or Compartmentalization in Mozilla Firefox
CVE-2026-4692 — content processes can declare themselves in RD...
CVE-2026-11110-AES-GCM-Nonce-Reuse-Leading-to-Key-Recovery
CVE-2026-11110 – Reutilização de Nonce em AES-GCM Levando à Recuperação de Chave Código do Programa Python root@kitploit: aesgcmnoncereusesim.py - Simulated encryption oracle with fixed nonce from Crypto.Cipher import AES import os key = os.urandom16 nonce = b'\x00' 12 ALWAYS SAME NONCE def...
EUVD-2026-63700
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information...
PT-2026-79164
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information...
CVE-2026-50577
In ePA 3.x Integration (fbeta-GmbH), request_counter is left unchanged in app/vau/VAUProtokoll.py, causing the server to reuse AES-GCM nonce/key pairs across responses. This enables a network attacker to recover plaintext XORs, exploit the Joux forbidden attack to recover the GHASH key, forge mes...
CVE-2026-53788 rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping
rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names...
CVE-2026-53788
CVE-2026-53788 affects rsync prior to 3.5.0. A newline injection in the name-converter uid/gid mapping interface lets local attackers forge protocol messages by embedding newline characters in user/group names, causing the rsync daemon to treat attacker-controlled data as legitimate protocol inpu...
EUVD-2026-58096
rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names...
F5 BIG-IP 安全漏洞
F5 BIG-IP is an application delivery platform developed by the American company F5. It integrates functions such as network traffic management, application security management, and load balancing. F5 BIG-IP has a security vulnerability that may allow attackers to forge error messages...
CVE-2022-23441
A use of hard-coded cryptographic key vulnerability CWE-321 in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors...
AZL-73192 CVE-2025-68972 affecting package gnupg2 for versions less than 2.4.9-1
In GnuPG through 2.4.8, if a signed message has \f at the end of a plaintext line, an adversary can construct a modified message that places additional text after the signed material, such that signature verification of the modified message succeeds although an "invalid armor" message is printed...
Mozilla Firefox 安全漏洞
Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation, U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in versions prior to Mozilla Firefox 146 that stems...