146691 matches found
node-forge ASN.1 Unbounded Recursion
...
node-forge ASN.1 OID Integer Truncation
...
CVE-2025-12816
...
CVE-2025-12977
...
CVE-2025-12969
...
CVE-2025-12970
...
WebAssembly Micro Runtime vulnerable to a segmentation fault in v128.store instruction
...
GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds
...
Metasploit Wrap-Up 11/28/2025
This week, we have added 10 new modules to Metasploit Framework including an SMB to MSSQL relay module, a remote code execution module targeting Fortinet software, additional 32-bit and 64-bit RISC-V payloads, and more. The SMB to MSSQL NTLM relay module allows users to open MSSQL sessions and ru...
Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP Update
Microsoft has announced plans to improve the security of Entra ID authentication by blocking unauthorized script injection attacks starting a year from now. The update to its Content Security Policy CSP aims to enhance the Entra ID sign-in experience at "login.microsoftonline.com" by only letting...
KLA90988 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability can b...
Microsoft Teams Flaw in Guest Chat Exposes Users to Malware Attacks
New research from Ontinue exposes a major security flaw in Microsoft Teams B2B Guest Access. Learn how attackers bypass all Defender for Office 365 protections with a single invite...
Exploit for Out-of-bounds Write in Microsoft
Contents General Introduction This was made to clarify gen...
net-imap rubygem vulnerable to possible DoS by memory exhaustion
...
Timing Side-Channel in PSK Binder Verification
...
DoS Vulnerability in wolfSSL TLS 1.3 CKS Extension
...
TLS 1.2 Client Can Downgrade Digest Used
...
Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt
...
Forward Secrecy Violation in WolfSSL TLS 1.3
...
The HTTP request was forbidden with client authentication scheme
July 2, 2026 -- Issue Recurrence Resolved July 2, 2026 | Veeam Customer Technical Support began observing an increase in cases reporting that jobs were failing with the same error documented in this article. July 3, 2026 | Microsoft engineering has implemented backend changes as part of the ongoi...