network-attacker

Network-Attacker network-attacker V0.1 is a Wifi Stress Testing Bash Script Program Based on Mdk3 Beacon Flooding & Deauthentication Attack Created To Help Beginners And even Professionals For a beacon Flooding Or Deauthentication Attack On Networks Installation sudo apt-get install git sudo git...

UniFi Network Application - Path Traversal

UniFi Network Application contains a path traversal vulnerability allowing a network attacker to access and manipulate files on the underlying system, potentially leading to account access, exploit requires network access. id: CVE-2026-22557 info: name: UniFi Network Application - Path Traversal...

CVE-2026-111249

The development-time LiveReload support listens on all network interfaces without authentication and accepts websocket connections from any origin. A network attacker, or a web page visited by the developer, can observe the names of changed files in the watched folder and the server version, and...

Linux Distros Unpatched Vulnerability : CVE-2026-123611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-name key-exchange group record via ...

AZL-113170 CVE-2026-123611 affecting package kata-containers 4.1.0.kata1-2

rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-name key-exchange group record via an unauthenticated ServerHello. Attackers can answer one connection with a ServerHello selecting X25519, causing later ClientHellos to se...

AZL-113179 CVE-2026-123611 affecting package kata-containers-cc 3.15.0.aks0-23

rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-name key-exchange group record via an unauthenticated ServerHello. Attackers can answer one connection with a ServerHello selecting X25519, causing later ClientHellos to se...

AZL-113299 CVE-2026-123611 affecting package rust-afterburn 5.8.2-2

rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-name key-exchange group record via an unauthenticated ServerHello. Attackers can answer one connection with a ServerHello selecting X25519, causing later ClientHellos to se...

AZL-113281 CVE-2026-123611 affecting package rust 1.98.1-1

rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-name key-exchange group record via an unauthenticated ServerHello. Attackers can answer one connection with a ServerHello selecting X25519, causing later ClientHellos to se...

AZL-113269 CVE-2026-123611 affecting package rust 1.75.0-31

rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-name key-exchange group record via an unauthenticated ServerHello. Attackers can answer one connection with a ServerHello selecting X25519, causing later ClientHellos to se...

CVE-2026-123611: rustls: rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the…

rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-name key-exchange group record via an unauthenticated ServerHello. Attackers can answer one connection with a ServerHello selecting X25519, causing later ClientHellos to se...

CVE-2026-121637 WatchGuard AuthPoint Gateway Improper HMAC Validation in LDAP Authentication Callback Allows Forged Authentication Results

An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session...

CVE-2026-121637

The WatchGuard AuthPoint Gateway contains an improper integrity validation vulnerability within its LDAP authentication callback . A network attacker who has obtained a valid header signature can forge the authentication result and transaction identifier in the request body. This flaw leads to un...

PT-2026-136982

An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a network attacker who has obtained a valid header signature to forge the authentication result and transaction identifier in the request body, resulting in unauthorized session...

CVE-2026-63482

Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, YETI registers the audit router without Dependsauth.getcurrentactiveuser, and core/web/apiv2/audit.py does not perform a route-level authentication check for...

EUVD-2026-116264

Yeti bridges the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline. Prior to 2.5.1, YETI registers the audit router without Dependsauth.getcurrentactiveuser, and core/web/apiv2/audit.py does not perform a route-level authentication check for...

EUVD-2026-114320

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the RADIUS authentication module opens an unconnected datagram socket and trusts the first UDP datagram received on the client source port. The receive path does not verify the source IP and port, match the response...

CVE-2026-46560: OpenIdentityPlatform OpenAM: Open Access Management (OpenAM) is an access management solution

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the RADIUS authentication module opens an unconnected datagram socket and trusts the first UDP datagram received on the client source port. The receive path does not verify the source IP and port, match the response...

CVE-2026-87862

A flaw was found in curl. When importing HTTP Strict Transport Security HSTS cache records, loading a parent domain entry configured to include subdomains before a longer-lived subdomain entry silently drops the subdomain policy. Consequently, once the parent policy expires, curl fails to upgrade...

Astra Linux – vulnerability in openjdk-11

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products under Oracle Java SE component: Networking. Affected versions include Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalV...

CVE-2026-108473 Improper Authentication and Credential Exposure in Multiple TP-Link Kasa Devices

Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send management instructions to an affected device without adequate authentication or authorization, allowing modification of the device state o...