23853 matches found
EEF-CVE-2026-55953 TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication
Summary The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the...
CVE-2026-55953
The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the downgrade...
CVE-2026-55953
The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the downgrade...
CVE-2026-55953
Summary: CVE-2026-55953 affects Erlang/OTP SSL/TLS client when using TLS 1.2 and DTLS. The client fails to verify that the server-chosen cipher suite in ServerHello was among the suites offered in ClientHello. An on-path attacker can respond with a ServerHello using an anonymous cipher suite (e.g...
mitos v1.43.0
Mitos Isolated, forkable computers for your AI agents. Millisecond microVM sandbox forking on Kubernetes: fork a running VM into parallel attempts and restore from memory in tens of milliseconds. Quickstart . Documentation . Features . Comparison . Contributing . Community What is Mitos Mitos giv...
CVE-2026-12989 Multiple vulnerabilities in Ghost Robotics' Vision 60
A lack of authentication in the mobile app APK v5.5.0 for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface and the HTTP API. Due to the lack of authorization...
Exploit for CVE-2026-15013
CVE-2026-15013 — miniOrange SAML SSO = 5.4.3 Auth Bypass PoC...
CVE-64600-Refluxfs-POC
RefluXFS CVE-64600 PoC This repo contains a PoC of the rec...
CVE-2026-64532 fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: bound NTFSDE view.dataoff in UpdateRecordDataRoot,Allocation In doaction's UpdateRecordDataRoot fslog.c:3489 and UpdateRecordDataAllocation fslog.c:3697 cases, the memmove destination is Add2Ptre, le16tocpue-view.dataof...
CVE-2026-14236
The Contact Form 7 – PayPal & Stripe Add-on WordPress plugin (versions before 2.5 ) is vulnerable to an Open Redirect vulnerability. The root cause is a failure to validate the host of a user-supplied return URL, which is used as the success and cancel redirect targets during a Stripe checkout fl...
Cybersecurity-Projects — Updated!
Cybersecurity Projects 🐉 70 Cybersecurity Projects, Certification Roadmaps & Resources Made possible by CertGames View Complete Projects: Currently building: DDoS Mitigation Tool Quick Navigation Projects Hands-on cybersecurity projects with full source code, organized in four tiers — Foundations...
[SECURITY] Fedora 43 Update: systemd-258.10-1.fc43
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses sock et and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...
PT-2026-64895
A lack of authentication in the mobile app APK v5.5.0 for Ghost Robotics' Vision 60 robot allows an unauthenticated attacker connected to the device's internal Wi-Fi network to gain unrestricted access to the web administration interface and the HTTP API. Due to the lack of authorization...
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator an...
Linux Distros Unpatched Vulnerability : CVE-2026-64533
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate lcnsfollow in logreplay conversion logreplay converts DIRPAGEENTRY32...
PT-2026-64959
Name of the Vulnerable Software and Affected Versions NitroShare Desktop versions prior to 0.3.5 Description The LAN file transfer server contains a path traversal issue that allows unauthenticated attackers on the same network to write arbitrary files. This occurs because the server fails to...
PT-2026-64991
Name of the Vulnerable Software and Affected Versions VeloCloud Orchestrator VCO on-prem affected versions not specified Description A security issue in the on-premises version of the orchestrator allows a remote attacker to access privileged internal functionality, which may lead to OS command...
Security Advisory 0144
Security Advisory 0144 . CSAF PDF Date: July 27, 2026 Revision | Date | Changes ---|---|--- 1.0 | July 27, 2026 | Initial release 1.1 | August 3, 2026 | Updated Affected Platforms to include: VeloCloud Orchestrator Hosted 1.2 | August 10, 2026 | Added CSAF JSON file for download The CVE-ID tracki...
VulnCheck KEV: CVE-2026-16812
Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator an...
