CVE-2026-103601 CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check

Release of unverified plaintext in the CCM CcmBlockCipher and DSTU 7624 CCM KCcmBlockCipher AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker to obtain decryptions of ciphertexts of their choosing via forged messages sent to an application that lets th...

CVE-2026-103601 CcmBlockCipher and KCcmBlockCipher leave unverified plaintext in the output buffer after a failed tag check

Release of unverified plaintext in the CCM CcmBlockCipher and DSTU 7624 CCM KCcmBlockCipher AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker to obtain decryptions of ciphertexts of their choosing via forged messages sent to an application that lets th...

PT-2026-104122

Release of unverified plaintext in the CCM CcmBlockCipher and DSTU 7624 CCM KCcmBlockCipher AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker to obtain decryptions of ciphertexts of their choosing via forged messages sent to an application that lets th...

G2.5_Openssl_V_1_0_1g

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

OpensSSL_1.0.1g_AfterPatch

OpenSSL 1.0.1g 7 Apr 2014 Copyright c 1998-2011 The OpenSSL Project Copyright c 1995-1998 Eric A. Young, Tim J. Hudson All rights reserved. DESCRIPTION The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the...

CVE-2026-16723

CVE-2026-16723 This is N-day patch we releasing by testing our model capabilities...

gh_release_test

GitHub.com Release Test Project This is a demo of the functionality higlighted in the following blog post: https://wwws.nightwatchcybersecurity.com/2021/04/25/supply-chain-attacks-via-github-com-releases/ Please direct any questions to [email protected]...

suds

VISIÓN GENERAL El cliente de servicios web "Suds" es un cliente ligero basado en soap para python que está licenciado bajo LGPL. Para más detalles, visita: Sitio del proyecto: https://fedorahosted.org/suds/ Documentación: https://fedorahosted.org/suds/wiki/Documentation Epydocs:...

pig_CS4.4

Nota: solo para fines de investigación y aprendizaje de seguridad; si la herramienta se utiliza para otros fines, el usuario asume toda la responsabilidad legal y solidaria; el autor y el editor no asumen ninguna responsabilidad legal ni solidaria. Cobalt Strike 4.4 Edición Zhuzhu. Esta versión e...

nextjs-cve-2026-23870-checker

@emstack/nextjs-cve-2026-23870-checker Comprobador y reparador CLI para las 13 vulnerabilidades de la Versión de Seguridad de Next.js de Mayo 2026, incluyendo CVE-2026-23870 DoS en Componentes de Servidor de React. Inicio rápido Interactive mode recommended npx...

Linux Distros Unpatched Vulnerability : CVE-2026-47491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release of memory resources,...

CVE-2026-47491

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release of memory resources, leaving a mapping accessible after the underlying memory is reused. A successful exploit of this vulnerability might lead to code...

CVE-2026-47491

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release of memory resources, leaving a mapping accessible after the underlying memory is reused. A successful exploit of this vulnerability might lead to code...

CVE-2026-47491

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release of memory resources, leaving a mapping accessible after the underlying memory is reused. A successful exploit of this vulnerability might lead to code...

CVE-2026-47491

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release of memory resources, leaving a mapping accessible after the underlying memory is reused. A successful exploit of this vulnerability might lead to code...

Security Bulletin: Multiple Vulnerabilities in IBM DevOps Release

Summary IBM DevOps Release 7.1.0.0 addresses multiple vulnerabilities. Vulnerability Details CVEID:CVE-2026-91776 DESCRIPTION: TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphis...

gitlab-profile

ESTADO DE PRUEBA : ↳ core-orchestrator tester ↳ documentation tester FECHA DE CREACIÓN: 2025-10-24 09:50 PM ↳ Alberto Marangelo - @theGlitched !WARNING ⚠️ ¡Este proyecto está en beta! 🎉 ¡sí! ¡Estamos felices de anunciar que la versión beta pronto estará completa! Desde la versión 0.153 se han...

ROS-20260930-73-0004

The vulnerability of the verityfecdecode function in the drivers/md/dm-verity-fec.c file of the Linux device driver for multiple devices such as RAID and LVM is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service...

ROS-20260930-73-0035

The vulnerability of the dma/qcom/gpi.c component in the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260930-73-0071

The vulnerability in the can/usb/kvaserusb/kvaserusbcore.c file of the Linux operating system is related to improper memory release before removing the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...