Nginx UI - Broken Access Control

Network attackers can fully control nginx service, including config modification and service restart, leading to complete service takeover. id: CVE-2026-33032 info: name: Nginx UI - Broken Access Control author: DhiyaneshDk severity: critical description: | Network attackers can fully control ngi...

CVE-2026-0073-Android-client-TLS-auth-bypass

CVE‑2026‑0073 is a logic bug in Android’s ADB daemon adbd that allows an attacker to bypass TLS mutual authentication and open a remote shell on a device that has wireless debugging enabled and has been paired with any computer at least once. The root cause is a single misused API: the return val...

EUVD-2026-118540

Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples trustzoneexamples, affecting versions through 26.06.00-lts and 26.09.00-pvw2, may allow a non-secure caller to supply unvalidated pointers or untrusted data, causing a timing side-channe...

CVE-2026-118785

The NXP MCUXpresso SDK TrustZone-M examples (trustzone_examples) are vulnerable to improper handling of non-secure-world input within NSC veneer functions . This vulnerability affects versions through 26.06.00-lts and 26.09.00-pvw2 . A non-secure caller can provide unvalidated pointers or untrust...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Use opener credentials for FSCTL mutations SETSPARSE, SETZERODATA, and SETCOMPRESSION operate on an open SMB handle but call VFS xattr, fallocate, or fileattr helpers using the current ksmbd worker credentials. These helpe...

printix-CVE-2022-25089

CVE-2022-25089 A system admin's complete nightmare, users changing the registry from anywhere and everywhere without authentication. Explore the docs » View Demo . Report Bug . Request Feature Table Of Contents About the Project Built With Getting Started Prerequisites Installation Usage Roadmap...

ed25519-unsafe-libs

ed25519-unsafe-libs Double Public Key Signing Function Oracle Attack on Ed25519 A list of potentially unsafe ed25519 signature libraries that allow a public api where secret and public key can be provided independently as signing function inputs. Misuse of these public apis can result to private...

CVE-2022-26923

CVE-2022-26923 – Certifried Exploit AD CS Abuse Automation of the exploitation of CVE-2022-26923 Certifried allowing privilege escalation via abuse of Active Directory Certificate Services AD CS and Resource-Based Constrained Delegation RBCD, leading to the dump of the NTLM hash of a domain...

CUAHarm

Measuring Harmfulness of Computer-Using Agents 🤗 Hugging Face 📄 Paper 📋 Introduction CUAHarm is a benchmark designed to evaluate the safety risks of Computer-Using Agents CUAs - AI agents that can autonomously control computers to perform multi-step actions. Key Features 🔍 CUAHarm Dataset : A...

CLEANSTART-2026-FS67491 Applications and libraries which misuse connection

CVE-2024-45337 affects multiple packages. Applications and libraries which misuse connection. See references for individual vulnerability details...

CLEANSTART-2026-AH39342 Applications and libraries which misuse connection

Security vulnerability affects the nfs-subdir-external-provisioner package. Applications and libraries which misuse connection...

Medium: oci-add-hooks

Issue Overview: Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates issued by the affected intermediate certificates. This would prevent possible future misuse ...

Amazon Linux 2023 : runc (ALAS2023-2026-3323)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3323 advisory. Due to security concerns regarding a small set of intermediate certificates issued by a specific Certificate Authority CA, the Go's crypto/x509 package is updated to not trust certificates...

CVE-2026-96364

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

CVE-2026-96364 Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

EUVD-2026-107830

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

CVE-2026-96364 Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

CVE-2026-96364

The Drupal Webform module, specifically when using the Webform Share submodule, contains an Improper Control of Interaction Frequency vulnerability (CWE-799). This flaw allows submissions for Ajax-enabled webforms to bypass anti-spam protections under certain circumstances. The vulnerability spec...

CVE-2026-96364 Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-171

Improper Control of Interaction Frequency vulnerability in Drupal Webform allows Functionality Misuse. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1...

CVE-2026-100798

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Cryptography misuse in Storage: Quota Manager component Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security...