CVE-2025-22457

PoC for CVE-2025-22457 A remote unauthenticated stack based buffer overflow affecting Ivanti Connect Secure, Pulse Connect Secure, Ivanti Policy Secure, and ZTA Gateways Overview This is a proof of concept exploit to demonstrate exploitation of CVE-2025-22457. For a complete technical analysis of...

CVE-2026-102760

When NetX Secure is built with NXSECUREKEYCLEAR, every TLS record sent on an active session is wiped after it has been handed to TCP. By then the TCP layer owns the packet chain and may already have released it to the packet pool. The wipe therefore writes zeros into packets that are free or in u...

CVE-2026-102759

NetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In nxsecureverifymac, a decrypted application record whose length equals the negotiated MAC size is treated as valid and returns success after advancing the receive sequence number. The...

CVE-2026-102758

The nxsecurex509asn1tlvblockparse function parses ASN.1 TLV tag-length-value blocks out of DER-encoded data. It is the primitive underneath all X.509 certificate parsing in NetX Secure, and therefore runs on certificates supplied by a remote peer during the TLS handshake. The function reads the...

CVE-2026-102728

Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them. Both are bounded out-of-bounds reads on a remotely reachable path, both are reached from a TLS or DTLS client connecting to a...

CVE-2026-102719

Predictable DTLS HelloVerifyRequest Cookie in NetX Secure...

CVE-2026-102709

Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...

CVE-2026-76461-Detection-Kit-

CVE-2026-76461 — Kit de Detección y Respuesta Recursos de detección, búsqueda y remediación para CVE-2026-76461 , una vulnerabilidad crítica de inyección SQL en Cisco AsyncOS para Cisco Secure Email Gateway SEG. ⚠️ Descargo de responsabilidad Este repositorio contiene únicamente contenido defensiv...

CVE-2026-102728

Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them. Both are bounded out-of-bounds reads on a remotely reachable path, both are reached from a TLS or DTLS client connecting to a...

CVE-2026-102728

The NetX Secure software contains two out-of-bounds reads within its client-side TLS/DTLS handshake parsers . The vulnerability occurs because the parsers read fields from a server-supplied message before validating that the message is sufficiently long. Although bounds checks are present and fun...

CVE-2026-102728

Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them. Both are bounded out-of-bounds reads on a remotely reachable path, both are reached from a TLS or DTLS client connecting to a...

EUVD-2026-89195

Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them. Both are bounded out-of-bounds reads on a remotely reachable path, both are reached from a TLS or DTLS client connecting to a...

CVE-2026-102719

Predictable DTLS HelloVerifyRequest Cookie in NetX Secure...

CVE-2026-102719

Predictable DTLS HelloVerifyRequest Cookie in NetX Secure...

EUVD-2026-89182

Predictable DTLS HelloVerifyRequest Cookie in NetX Secure...

CVE-2026-102719

The NetX Secure networking stack is vulnerable to a Predictable DTLS HelloVerifyRequest Cookie . This issue allows for the bypass of the DTLS cookie exchange mechanism, which is intended to prevent DoS attacks. While the base severity is MEDIUM (6.3), the attack complexity is rated as HIGH . No s...

CVE-2026-102719

Predictable DTLS HelloVerifyRequest Cookie in NetX Secure...

CVE-2026-102709

An improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker in the non-secure world to provide pointers to secure memory. The secure firmware fails to verify these pointers before dereferencing them, leading to unintended...

EUVD-2026-89172

Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...

CVE-2026-102709

Improper validation of non-secure NS pointers in multiple TrustZone-M non-secure callable NSC entry functions allows an attacker executing in the non-secure world to supply pointers to secure memory. The secure firmware subsequently dereferences these attacker-controlled pointers without verifyin...