31545 matches found
CVE-2026-82018: Not Failing Securely
IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...
PT-2026-83366
Name of the Vulnerable Software and Affected Versions IGEL OS 12 versions prior to 12.9.0 IGEL OS 12 version 12.8.3 LTS IGEL OS 11 versions prior to 11.11.150 Description A secure boot bypass exists in the GRUB boot stage. A physically present attacker can gain unauthorized root access by placing...
CVE-2026-25250
EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."...
CVE-2026-25250
CVE-2026-25250 is a Windows Secure Boot security feature bypass caused by a missing cryptographic step in a Microsoft-signed third-party bootloader (EAZ EazyFix 12.9 ), which completely skips signature verification when loading drivers. An authorized local attacker with high privileges can bypass...
CVE-2026-25250
EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."...
EUVD-2026-67240
EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."...
CVE-2026-25250
EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."...
The vulnerability of the Secure Kernel Mode mode in Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Secure Kernel Mode feature in Windows operating systems is related to improper checking of consistency in input data. Exploiting this vulnerability can allow attackers to enhance their privileges...
Microsoft Windows: CVE-2026-25250: MITRE: CVE-2026-25250 Secure Boot disable Eazy Fix
EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."...
CVE-2026-19854: Cleartext Transmission of Sensitive Information
When the ClickHouse plugin uses Native protocol the default with PDC or secure SOCKS, it asks for TLS but the connection library ignores that and talks to ClickHouse in the clear. Username, password, queries, and results can be read on the hop after the proxy. The server certificate is never...
curl: CVE-2026-80255: secure cookie attribute bypass with tab
Summary A Set-Cookie header using HTAB horizontal tab instead of SPACE before the Secure attribute — e.g. Set-Cookie: sid=SECRET;\tSecure — causes curl to store the cookie without its Secure flag. The cookie is then sent over plaintext HTTP on subsequent requests to the same host. The...
Cisco Advance Notification for Publication of September 2, 2026, Security Advisories
On September 2, 2026, the Cisco Product Security Incident Response Team PSIRT published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco IOS XR Software Security Hardening Release: September 2026...
EUVD-2026-42399
asyncssh has SCP Path Traversal to Arbitrary File Write...
GO-2026-6290 mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable in github.com/sonirico/mcp-shell
mcp-shell has a Secure Mode Allowlist Bypass via Default /bin/bash Executable in github.com/sonirico/mcp-shell...
GO-2026-6292 mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist in github.com/sonirico/mcp-shell
mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist in github.com/sonirico/mcp-shell...
GO-2026-6291 mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias in github.com/sonirico/mcp-shell
mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias in github.com/sonirico/mcp-shell...
CVE-2026-54467
On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...
CVE-2026-54467
On the Trusted Firmware-M TF-M 2 through 2.3.0 platform before 00d1b3e, mailbox initialization on PSOC64 and RP2350 accepts a non-secure, unvalidated, supplied pointer...
CVE-2026-54467
Trusted Firmware-M (TF-M) versions 2 through 2.3.0 (before commit 00d1b3e) contain a vulnerability in the mailbox initialization routine on PSOC64 and RP2350 platforms. The root cause is acceptance of a non-secure, unvalidated pointer supplied during initialization, which could allow compromise o...