1579 matches found
CVE-2026-108268
Enclave OS Virtual runs container workloads inside confidential virtual machines with end-to-end attestation. Prior to tdx-v0.2.43 and tdx-gpu-v0.6.27, the TDX/GPU RA-TLS certificate issuer placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to th...
CVE-2026-108265
Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS...
CVE-2026-108269
Prior to version 0.5.0 , the Rust and Go challenge verifiers in Remote Attestation TLS Clients are vulnerable to an Origin Validation Error (CWE-346). The flaw exists because the verifiers accepted quote ReportData bound only to the certificate public key and client nonce, rather than the active ...
EUVD-2026-96019
Remote Attestation TLS Clients provides multi-language utilities for verifying attested TLS connections. Prior to 0.5.0, the Rust and Go RA-TLS challenge verifiers accepted quote ReportData that was bound to the certificate public key and client nonce but not to the active TLS session before...
CVE-2026-108268
Enclave OS Virtual contains a vulnerability where the TDX/GPU RA-TLS certificate issuer fails to include a value bound to the active TLS session within the quote ReportData . This omission allows an attacker who possesses an enclave TLS private key to relay a genuine quote to a different connecti...
CVE-2026-108267
The Privasys Go programming language fork, which provides RA-TLS support for crypto/tls , is vulnerable in versions prior to privasys-v0.5.1-go1.26.5 . In challenge-mode RA-TLS, certificates failed to bind quote ReportData to the active TLS session, binding it only to the certificate public key a...
CVE-2026-108265
The Enclave OS Mini Rust-based runtime for Intel SGX enclaves contains a vulnerability in the RA-TLS challenge certificate path (prior to wasm-v0.40.0 ). The issue stems from the runtime placing the certificate public-key hash and client nonce in the quote ReportData while failing to include a va...
CVE-2026-108265 enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session
Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS...
EUVD-2026-95996
Enclave OS Mini is a Rust-based runtime for confidential applications inside Intel SGX enclaves. Prior to wasm-v0.40.0, the SGX runtime's RA-TLS challenge certificate path placed the certificate public-key hash and client nonce in quote ReportData but omitted a value bound to the active TLS...
CVE-2026-18143
CVE-2026-18143 — Request a Quote for WooCommerce Addify 임의 파일 업로드 Request a Quote for WooCommercewoocommerce-request-a-quote, Addify / WooCommerce.com의 CVE-2026-18143에 대한 Python 3 PoC입니다. 설명 PoCbit / GitHub CVE-2026-18143 — Request a Quote for WooCommerce ≤ 2.9.2 는 afrfqsubmitquoteviapopup을 통해 인증...
CVE-2019-12189
CVE-2019-12189 - ثغرة XSS في Zoho ManageEngine ServiceDesk Plus 9.3 معلومات الوصف: تم اكتشاف ثغرة XSS في ManageEngine ServiceDesk Plus الإصدار الإصدارات المتأثرة: 9.3 الباحث: Dang The Tuyen إثبات المفهوم تنشأ الثغرة من الالتباس بين علامتي الاقتباس المفردة والفاصلة المنقوطة في سلسلة الاستعلام الخا...
CVE-2026-102422
A flaw was found in shell-quote. This vulnerability allows an attacker to achieve arbitrary command execution by supplying crafted input containing line break characters after a comment marker. When input is quoted, the comment marker comments out subsequent quotes until a newline is encountered,...
CVE-2026-22226
CVE-2026-22226 إثبات المفهوم لـ CVE-2026-22226 حقن أوامر نظام التشغيل من جانب LAN مع المصادقة في عميل VPN لموجهات TP-Link Archer Wi-Fi ملخص الثغرة الأمنية يخزن متحكم عميل VPN وصف الإدخال الذي يتحكم به المستخدم des في تكوين UCI باستخدام تعبير نمطي ضعيف للتحقق. عندما تتم قراءة الإدخال لاحقًا أثناء...
CVE-2024-24576-PoC-Python
CVE-2024-24576-Poc-Python Un POC rapide pour la vulnérabilité divulguée ici https://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ Après avoir exécuté le script, il demandera un argument à passer au fichier BAT. Dans la capture d'écran, vous pouvez voir qu'en...
EUVD-2026-95304
jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the default-enabled TextStyle filter that inserts unvalidated URLs into anchor href attributes. Authenticated attackers can post messages with javascript: links or quote-breaking URLs to...
CVE-2026-107798 Jivejdon through commit ee67a65e Stored XSS via Markdown Links in TextStyle Rendering Filter
jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the default-enabled TextStyle filter that inserts unvalidated URLs into anchor href attributes. Authenticated attackers can post messages with javascript: links or quote-breaking URLs to...
CVE-2026-3288-lab
CVE-2026-3288 Laboratoire Vulnérable Docker Injection de Configuration dans NGINX Ingress Controller ⚠️ AVERTISSEMENT : Ce laboratoire contient des configurations intentionnellement vulnérables pour FORMATION EN SÉCURITÉ AUTORISÉE UNIQUEMENT Présentation de la Vulnérabilité CVE-2026-3288 CVSS 8.8...
CVE-2026-65321-pyathena
CVE-2026-65321 : Injection SQL dans PyAthena via l'échappement des guillemets par antislash pour les instructions non-SELECT Sévérité : Critique, CVSS v4.0 9.3 / CVSS v3.1 9.8 attribué par VulnCheck, le CNA Vecteur v4.0 : CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Vecteur v3....
cve-2023-1671
Сve-2023-1671 كيف يعمل cve-2023-1671https://vulners.com/cve/CVE-2023-1671؟ /opt/ws/bin/ftsblistpack هو سكربت Perl يقوم باستدعاء /opt/ws/bin/sblistpack، وهو سكربت Perl آخر. وسائط أمر الصدفة فيه محاطة بعلامات اقتباس مفردة: $rc += system"$sblistpack '$uri' '$user' '$filetype' '$filein' '$fileout'";...
