PasswordPusher v1.45.11-v2.9.5 - Unauthenticated Anonymous Push Deletion via Ownership Bypass

PasswordPusher v1.45.11 through v2.9.5 allows unauthenticated deletion of anonymous pushes due to a nil==nil ownership-check bypass CWE-863. The deletion guard evaluates @push.user == currentuser || @push.deletablebyviewer. For anonymous pushes, @push.user is nil; for unauthenticated requests,...

CVE-2026-29781

Architectural vulnerability in the Sliver C2 server allows for Reverse-C2 Weaponization. By extracting credentials from a captured implant, a defender can weaponize the C2 relationship to trigger a remote Infrastructure Kill-Switch. This exploitation targets a systemic lack of nil-pointer...

CVE-2026-53719

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant create...

CVE-2026-53719 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant create...

CVE-2026-53719 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant create...

CVE-2026-53719

Envoy Gateway (open-source Kubernetes application gateway) contains a nil-dereference in translateSecurityPolicyForRoute (internal/gatewayapi/securitypolicy.go) that triggers when a namespace-scoped tenant creates a SecurityPolicy targeting a TCPRoute while omitting spec.authorization. The result...

EUVD-2026-78075

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant create...

CVE-2026-53719 Envoy Gateway: Nil-dereference when SecurityPolicy targets TCPRoute without spec.authorization

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSecurityPolicyForRoute in internal/gatewayapi/securitypolicy.go dereferences a nil authorization value when a namespace-scoped tenant create...

google-poc

Para reproducir el CVE-2025-13425 solo sigue los pasos a continuación: Paso 1: Clona el código fuente fresco de osv-scalibr: root@kitploit: $ git clone https://github.com/google/osv-scalibr Paso 2: Elimina el código mencionado en el commit de la corrección...

CVE-2026-82749

Incorrect Authorization vulnerability in ash-project ash widens a relationship's parent... scoping filter to match unintended records when the referenced parent field cannot be resolved. Loading a relationship whose filter references parent... resolves that expression against the parent record...

CVE-2026-82749 Ash relationship parent(...) filter degrades to an IS NULL match when the parent field is unresolved, leaking scoped records

Incorrect Authorization vulnerability in ash-project ash widens a relationship's parent... scoping filter to match unintended records when the referenced parent field cannot be resolved. Loading a relationship whose filter references parent... resolves that expression against the parent record...

EUVD-2026-68953

Incorrect Authorization vulnerability in ash-project ash widens a relationship's parent... scoping filter to match unintended records when the referenced parent field cannot be resolved. Loading a relationship whose filter references parent... resolves that expression against the parent record...

CVE-2026-62309

A flaw was found in CoreDNS. A remote attacker can send a specially crafted 28-byte UDP datagram to a CoreDNS server with the proxyproto plugin enabled. This malformed datagram can cause the CoreDNS process to crash, leading to a denial of service DoS. The vulnerability arises from improper...

CVE-2026-82724

Incorrect Authorization vulnerability in ash-project ashphoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the tenant they are meant to enforce. AshPhoenix.LiveView.SubdomainHook.onmount/4 attached a handleparams hook to assign the...

CVE-2026-82724

AshPhoenix.LiveView.SubdomainHook in the ash-project/ash_phoenix Elixir library (versions 2.1.26 through before 2.3.25) contains a broken access control flaw. The handle_subdomain authorization callback was invoked during on_mount/4 , before the tenant assign was written by the handle_params hook...

CVE-2026-82724 Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain

Incorrect Authorization vulnerability in ash-project ashphoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the tenant they are meant to enforce. AshPhoenix.LiveView.SubdomainHook.onmount/4 attached a handleparams hook to assign the...

CVE-2026-82724 Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain

Incorrect Authorization vulnerability in ash-project ashphoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the tenant they are meant to enforce. AshPhoenix.LiveView.SubdomainHook.onmount/4 attached a handleparams hook to assign the...

EEF-CVE-2026-82724 Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain

Summary Incorrect Authorization vulnerability in ash-project ashphoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the tenant they are meant to enforce. AshPhoenix.LiveView.SubdomainHook.onmount/4 attached a handleparams hook to...

EUVD-2026-68336

Incorrect Authorization vulnerability in ash-project ashphoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the tenant they are meant to enforce. AshPhoenix.LiveView.SubdomainHook.onmount/4 attached a handleparams hook to assign the...

Linux Distros Unpatched Vulnerability : CVE-2026-79778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transpo...