20834 matches found
Spring Security 6.5.x < 6.5.12 / 7.0.x < 7.0.6.1 / 7.1.x < 7.1.0.1 DPoP Proof Replay
The version of Spring Security installed on the remote host is 6.5.x prior to 6.5.12, 7.0.x prior to 7.0.6.1, or 7.1.x prior to 7.1.0.1. It is, therefore, affected by a vulnerability: - Spring Security's DPoPProofJwtDecoderFactory uses an internal cache to store the processed jti JWT ID claims,...
Rocky Linux 8 [CIQ] Security Update: bind / bind-chroot / bind-debuginfo / bind-debugsource / bind-devel / etc Multiple Vulnerabilities (crlsa-2024_1782)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20241782 advisory. bind9: Parsing large DNS messages may cause excessive CPU load CVE-2023-4408 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387...
CentOS Linux 8.4 [TuxCare] Security Update: bind / bind-chroot / bind-devel / bind-export-devel / etc (CENTOS8.4:CLSA-2026:1785267075)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1785267075 advisory. - If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these...
Semi-Quantum Cryptography with Certified Deletion
Certified deletion allows a client to upload encrypted data to a server as a quantum state, then later request that the server delete their data and detect whether the server complies. If verification passes, then the data on the server will remain hidden even if the decryption key is later leake...
Proof-Gated Signing: Solver-Checked Transaction Guards That Hold under State Drift for Onchain AI Agents
AI agents that control wallets read attacker-reachable content, so they can be steered into proposing harmful transactions. The usual last line of defense is a pre-signing check: a static allowlist, an LLM reviewer, or a transaction simulation. All three share a gap: the check describes the chain...
CVE-2026-102275 PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion
PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.fromjwk in jwt/algorithms.py is affected because private-JWK import path does not compare the public key derived from d with x. This occurs when an OKP private JWK supplies non-corresponding ...
tumblr-xss-poc
tumblr-xss-poc Benign proof-of-concept...
Too Late to Slash: Coordinating a Risk-Free Equivocation Attack
Slashing is commonly argued to secure proof-of-stake blockchains by confiscating the stake of misbehaving validators. The usual justification is that, without slashing, validators can solicit an equivocation attack by signing conflicting blocks: if enough others join, the attack succeeds;...
MAL-2026-16478 Malicious code in event-hunter (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f94b74862f327effaa43c1d01c4fd769626f73214d0706b80fef8b8a395cc3e8 On npm install, the declared postinstall hook runs node index.js, which reads os.hostname and a timestamp, base64-encodes the JSON payload, and issue...
SUSE CVE-2026-77119
A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through...
CVE-2026-77255
creationtimestamp| type| source ---|---|--- 2026-09-22 22:36:08+00:00| published-proof-of-concept| https://github.com/sooperset/mcp-atlassian/security/advisories/GHSA-2xj6-xx86-cwwc 2026-09-30 15:07:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mwqmnjuef727...
CVE-2026-93680
creationtimestamp| type| source ---|---|--- 2026-09-22 03:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102985 2026-09-22 07:00:04+00:00| published-proof-of-concept| Telegram/vyIeo1Zc9XylBexdsiTomPffV682Wt6mgpuKtfL99P5mYic 2026-09-22 15:00:07+00:00| seen|...
CVE-2026-93674
creationtimestamp| type| source ---|---|--- 2026-09-22 03:00:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102990 2026-09-22 15:00:07+00:00| seen| Telegram/tRGJvhGulvE60BKtV9RMDKpw0AGHjXygS1hBVz2YWgBcAA 2026-09-22 15:00:07+00:00| published-proof-of-concept|...
cve-2022-0847-poc-dockerimage
cve-2022-0847-poc...
Agentic-IC3: Enabling Semantic Proof Search in IC3 Model Checking
IC3 is a state-of-the-art algorithm for hardware model checking that proves safety properties by incrementally constructing an inductive invariant consisting of a set of lemmas. Its effectiveness depends on generalization heuristics that identify useful lemmas and guide proof search. However, man...
CVE-2026-61629
creationtimestamp| type| source ---|---|--- 2026-09-21 22:35:04+00:00| published-proof-of-concept| https://github.com/lucasdillmann/nginx-ignition/security/advisories/GHSA-jr34-h97m-9hpx 2026-09-21 23:31:26+00:00| seen| https://gist.github.com/alon710/ad227f40c773c675cce4604553df73dc 2026-09-22...
CVE-2026-61628
creationtimestamp| type| source ---|---|--- 2026-09-21 22:32:02+00:00| seen| https://gist.github.com/alon710/c22586b9d9c77f8331c17f01285d9c0d 2026-09-21 22:35:02+00:00| published-proof-of-concept| https://github.com/lucasdillmann/nginx-ignition/security/advisories/GHSA-pxcx-fv34-x9p5 2026-09-21...
CVE-2026-91097
creationtimestamp| type| source ---|---|--- 2026-09-21 21:00:04+00:00| seen| https://t.me/GithubRedTeam/102976 2026-09-22 00:00:09+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/102976 2026-09-22 06:00:04+00:00| seen| https://t.me/GithubRedTeam/102995 2026-09-22 07:00:04+00:00|...
CVE-2026-56942
creationtimestamp| type| source ---|---|--- 2026-09-21 10:00:04+00:00| published-proof-of-concept| https://t.me/orderofsixangles/3196 2026-09-21 10:00:04+00:00| published-proof-of-concept| https://t.me/poxek/6330 2026-09-22 00:00:10+00:00| published-proof-of-concept|...