142548 matches found
CVE-2026-19953
CVE-2026-19953 affects Perl URI versions before 5.36 . The root cause lies in the nameprep function, which lowercases host labels but omits the NFC Unicode normalization required by IDNA (RFC 5891) before punycode encoding. As a result, non-NFC host labels encode to a non-standard A-label that do...
CVE-2026-19953 URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep
URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded RFC 5891, so a label...
CVE-2026-19953
URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded RFC 5891, so a label...
CVE-2026-19953 URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep
URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded RFC 5891, so a label...
CVE-2026-19953 URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep
URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep. nameprep lowercases each host label but performs no Unicode normalization. IDNA requires a label to be normalized to Form C before it is encoded RFC 5891, so a label...
SysTrace
SysTrace v1.5 A Linux system-call monitoring and behavioral security analysis tool combiningptrace-based tracing, lightweight namespace isolation, and machine learning classification. SysTrace observes the runtime behavior of a target program at the system-call level, extracts behavioral features...
CVE-2026-65400
CVE-2026-65400 For the first time in a while, we've got an RCE on MacOS. Originally discovered by @osxreverser, and later expanded upon by bynar.io. See https://blog.calif.io/p/no-country-for-old-passwords for some more info. This is mostly derived from work by @panchocosil well, Claude..., who...
gitlab-cve-2026-19478-lab
CVE-2026-19478 — GitLab GraphQL @glintroduced unauthenticated arbitrary-method-invocation validation lab + PoC Reproducible A/B lab and safe PoC for CVE-2026-19478 GitLab CE/EE, CVSS 9.4, Critical. An unauthenticated attacker can invoke arbitrary 0-argument Ruby methods on GraphQL-resolved domain...
AudioServer-Voip-Recorder
Goal: Demonstrate VoIP stream capture by hooking Android's audioserver specifically libaudioflinger.so and recording uplink mic and downlink speaker PCM buffers when the system is in communication mode. Project Design & Methodology Architecture: Controller App Android UI with 9 buttons to manage...
DEBIAN-CVE-2026-17615
A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...
CVE-2026-17615
A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...
milvus-auth-audit
milvus-auth-audit Milvus authentication security audit script. Detects three authentication flaws: Flaw| CVE| Affected versions| Detection method ---|---|---|--- sourceid backdoor auth bypass| CVE-2025-64513| --port 19530 --mgmt-port 9091 --internal-port 53100 Arguments: --host: Milvus proxy...
GhostESP v2.1.2-pre2
The ESP-IDF-native wireless security platform for ESP32. Deep Wi-Fi and BLE assessment, research-grade capture and export, and a real app ecosystem. Built directly on Espressif's ESP-IDF rather than through the Arduino core, so new silicon and radio features land first and there is no abstraction...
CVE-2026-60004
CVE-2026-60004 — RCE в Gitea через Git-хук Diffpatch Инъекция хука в bare-клон → post-index-change → Выполнение произвольных команд Обзор CVE-2026-60004 — критическая CVSS 9.8 уязвимость удалённого выполнения кода без аутентификации в самохостинговых Git-платформах Gitea и Forgejo , затрагивающая...
CVE-2025-29471
Vulnerabilidad XSS Almacenado en Nagios Log Server Escalada de Privilegios a Admin ▶️ PoC Demo Fecha: 2025-04-02 Autor del Exploit: Seth Kraft Página del Proveedor: https://www.nagios.com/ Registro de Cambios del Proveedor: https://www.nagios.com/changelog/log-server Enlace del Software:...
CVE-2026-17615
A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...
CVE-2026-17615
CVE-2026-17615 is an XML External Entity (XXE) vulnerability in RESTEasy's SourceProvider component. The root cause is that SourceProvider.writeTo() creates a SAXParser without disabling external entity resolution. An unauthenticated attacker can exploit this by sending a specially crafted XML bo...
CVE-2026-17615 Resteasy-core: resteasy sourceprovider remote unauthenticated file read
A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...
CVE-2026-17615
A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...
EUVD-2026-68654
A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...