17 matches found
CVE-2021-35576
CVE-2021-35576 CVE-2021-35576 绕过Oracle统一审计的安全漏洞，概念验证详情发布在此：https://databasesecurityninja.wordpress.com/2022/06/11/cve-2021-35576-bypassing-unified-audit-policy/ CVE详情：https://vulners.com/cve/CVE-2021-35576...
CVE-2026-78427
NeuVector's admission webhook contains a bypass vulnerability where containers whose image path matches one of three hardcoded service mesh sidecar images are silently excluded from policy evaluation. Since the image path is fully controlled by the workload author, any user with permission to dep...
CVE-2026-78427 Admission Control Bypass via Hardcoded Sidecar Image Exemption
The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded service mesh sidecar images. Since the image path is entirely controlled by the workload author, any user capable of deploying workloads can evade admission den...
CVE-2026-78427: Reliance on Untrusted Inputs in a Security Decision
The NeuVector admission webhook silently excludes containers from policy evaluation when their image path matches one of three hardcoded service mesh sidecar images. Since the image path is entirely controlled by the workload author, any user capable of deploying workloads can evade admission den...
BIT-KEYCLOAK-2026-9800 Keycloak-policy-enforcer: keycloak policy enforcer: authorization bypass via incorrect uri comparison
A flaw was found in Keycloak Policy Enforcer. This vulnerability allows any authenticated user to bypass all authorization policies, including role, scope, and User-Managed Access UMA permission checks. By including the configured access-denied page path within a request URL, either as a path...
EUVD-2006-5791
Malware in sbrugna...
EUVD-2022-42711
Malicious code in bioql PyPI...
Favicon Trojans: Executable Steganography Via Ico Alpha Channel Exploitation
This paper presents a novel method of executable steganography using the alpha transparency layer of ICO image files to embed and deliver self-decompressing JavaScript payloads within web browsers. By targeting the least significant bit LSB of non-transparent alpha layer image values, the propose...
Fedora 37 : php-Smarty (2022-d5fc9dcdd7)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-d5fc9dcdd7 advisory. 3.1.47 - 2022-09-14 Security - Applied appropriate javascript and html escaping in mailto plugin to counter injection attacks 454 Fixed - Fixed use ...
CVE-2021-34574 Password policy evasion in products of MB connect line and Helmholz
In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his account into a new password that violates the password policy by intercepting and modifying the request that is send to t...
CVE-2020-2035: Improper Input Validation
When SSL/TLS Forward Proxy Decryption mode has been configured to decrypt the web transactions, the PAN-OS URL filtering feature inspects the HTTP Host and URL path headers for policy enforcement on the decrypted HTTPS web transactions but does not consider Server Name Indication SNI field within...
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Desktop
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Desktop Advisory ID: cisco-sa-20061108-csd Revision 1.0 For Public Release 2006 November 08 1600 UTC GMT - ----------------------------------------------------------------------- Summar...
CVE-2006-5807
Cisco Secure Desktop CSD before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka "System Policy Evasion"...
CVE-2006-5807
CVE-2006-5807 affects Cisco Secure Desktop (CSD) prior to version 3.1.1.45. The issue allows local users to escape the secure desktop environment by launching certain applications that switch to the default desktop, referred to as System Policy Evasion. The vulnerability is local in scope with pa...
CVE-2006-5807
Cisco Secure Desktop CSD before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka "System Policy Evasion"...
CVE-2006-5807: Undefined Security Weakness
Cisco Secure Desktop CSD before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka "System Policy Evasion"...