Microsoft Edge (Chromium-based) Spoofing Vulnerability

User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

Exploit for CVE-2022-30190

CVE-2022-30190 Follina Educational Malware Development, Expl...

apparmor: fix differential encoding verification

...

apparmor: Fix double free of ns_name in aa_replace_profiles()

...

Sleuth Kit tsk_recover Path Traversal

...

GHSA-PW2V-CMFH-X2P3 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu, linux-azure...

CVE-2026-23208 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-vmware, linux-aws, linux-qemu, linux-azure...

PT-2026-32047

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description A user interface misrepresentation allows an attacker to perform spoofing over a network. Recommendations At the moment, there is no information about a newer version th...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser included with Windows 10 and later versions of the operating system developed by Microsoft. There is a security vulnerability in Microsoft Edge, which stems from errors in the handling of critical information within the Edge browser based on the Chromium kernel. Th...

PT-2026-32046

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description Microsoft Edge is susceptible to a spoofing issue. The vulnerability's severity has been increased. The issue is related to the browser's ability to accurately represent...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser included with Windows 10 and later versions of the Microsoft operating system. There is a security vulnerability in Microsoft Edge, which stems from incorrect user interface representations of critical information, potentially leading to network spoofing attacks...

📄 Microsoft MMC MSC EvilTwin Local Admin Creation

Microsoft MMC MSC EvilTwin local admin creation exploit. !/usr/bin/env python3 Exploit Title: Microsoft MMC MSC EvilTwin - Local Admin Creation Date: 2025-11-22 Author: Mohammed Idrees Banyamer Author Country: Jordan GitHub: https://github.com/mbanyamer Vendor Homepage: https://www.microsoft.com...

CVE-2026-39361

OpenObserve is a cloud-native observability platform. In 0.70.3 and earlier, the validateenrichmenturl function in src/handler/http/request/enrichmenttable/mod.rs fails to block IPv6 addresses because Rust's url crate returns them with surrounding brackets e.g. "::1" not "::1". An authenticated...

On Microsoft’s Lousy Cloud Security

ProPublica has a scoop: In late 2024, the federal government's cybersecurity evaluators rendered a troubling verdict on one of Microsoft's biggest cloud computing offerings. The tech giant's "lack of proper detailed security documentation" left reviewers with a "lack of confidence in assessing th...

CVE-2026-21388

CVE-2026-21388 affects Mattermost Plugins versions

This fake Windows support website delivers password-stealing malware

A fake Microsoft support website is tricking people into downloading what looks like a normal Windows update. Instead, it installs malware designed to steal passwords, payment details, and account access. Because the file looks legitimate and avoids detection, it can slip past both users and...

NULL Pointer Dereference When Processing a Delta CRL

...

Potential Use-after-free in DANE Client Code

...

Heap Buffer Overflow in Hexadecimal Conversion

...

CVE-2026-34721

Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1 and 6.5.4, the OAuth callback endpoints for Microsoft, Google, and Facebook external credentials do not validate a CSRF state parameter. This vulnerability is fixed in 7.0.1 and 6.5.4...