28529 matches found
CVE-2026-20354 Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...
EUVD-2026-61222
fastify vulnerable to X-Forwarded- spoofing under trustProxy hop-count...
audit-kernel
लिनक्स कर्नेल ऑडिट सबसिस्टम https://git.kernel.org/pub/scm/linux/kernel/git/pcmoore/audit.git https://github.com/linux-audit/audit-kernel लिनक्स ऑडिट सबसिस्टम एक सुरक्षित लॉगिंग ढाँचा प्रदान करता है जिसका उपयोग सुरक्षा-संबंधी घटनाओं को कैप्चर करने और रिकॉर्ड करने के लिए किया जाता है। इसमें एक...
krustyloader-analysis
تحليل KrustyLoader يحتوي هذا المستودع على موارد متعلقة بالتحليل الذي أُجري على KrustyLoader والمتوفرة في منشور المدونة هذا: https://www.synacktiv.com/publications/krustyloader-rust-malware-linked-to-ivanti-connectsecure-compromises. سكربت بايثون لاستخراج وفك تشفير عنوان URL الذي يستخدمه المحمّل...
PSCF
إطار عمل OWASP لقدرات أمن المنتجات PSCF https://prods.ec/ إطار عمل OWASP لقدرات أمن المنتجات PSCF هو دليل شامل مصمم لتأطير وتعزيز أمن المنتجات البرمجية. من خلال اعتماد نهج منظم لتحديد قدرات الأمان وتنفيذها وإدارتها، يهدف إطار PSCF إلى تحسين أمان المنتجات وضمان الامتثال للمعايير التنظيمية والصناعي...
CVE-2021-22893
CVE-2021-22893 ثغرة تنفيذ التعليمات البرمجية عن بُعد في Pulse Connect Secure CVE-2021-22893 Shodan : https://www.shodan.io/search?query=http.component%3A%22pulse+secure%22...
secure cookie attribute bypass with tab
A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...
CURL-CVE-2026-80255 secure cookie attribute bypass with tab
A Set-Cookie: header using tab horizontal tab, ASCII code 9 instead of space ascii code 32 immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host...
Ivanti Connect Secure - Stack-based Buffer Overflow
Ivanti Connect Secure 22.7R2.5, Ivanti Policy Secure 22.7R1.2, and Ivanti Neurons for ZTA gateways 22.7R2.3 contain a stack-based buffer overflow in the clientCapabilities parameter handling. This vulnerability allows remote unauthenticated attackers to execute arbitrary code through IF-T TLS...
CVE-2023-46805
CVE-2023-46805 स्कैनर CVE-2023-46805 स्कैनर Shodan का उपयोग करके देश-वार संभावित रूप से कमजोर Ivanti Connect Secure उपकरणों के लिए है। स्क्रिप्ट संस्करण: 1.3 हाल ही में Assetnote द्वारा प्रकाशित ब्लॉग पोस्ट के साथ अपडेट किया गया ⚠️ यह स्क्रिप्ट रक्षात्मक उद्देश्यों के लिए है और इसका उपयोग साइबर...
secure-boot-cert-servicing
استبدال شهادات Secure Boot — التقييم والصيانة سكربت PowerShell واحد ومستقل بذاته يقيّم وضع شهادات Secure Boot على جهاز Windows بخصوص الاستبدال 2011 ← 2023 CVE-2023-24932 / KB5025885، وفقط عندما تطلب منه ذلك صراحةً، يُشترك بالجهاز في خط أنابيب الصيانة من Microsoft. نُشر بواسطة Exchange Technology...
pulse-secure-vpn-mitm-research
pulse-secure-vpn-mitm-research पल्स सिक्योर mitm अनुसंधान रिलीज़ दिनांक विक्रेता के साथ संयुक्त रिलीज़ तिथि: 26 अक्टूबर 2020 लेखक David Kierznowski, @withdk श्रेय Pulse Secure PSIRT टीम से साहिल महाजन, प्रकटीकरण प्रक्रिया में सहायता के लिए। एलिसा हरेरा, जस्टिन वैगनर, मिमिर, और रिच वॉरेन उनके लेख...
CVE-2025-0282
CVE-2025-0282 Ivanti Connect Secure IFT TLS 스택 오버플로우 사전 인증 RCE CVE-2025-0282 이는 의도적으로 비자명한 방식으로 손상되어 있으며, 이전에 저희의 익스플로잇 기술 블로그 게시물에서 설명한 대로 작동하도록 하려면 상당한 노력이 필요합니다. 이 취약점을 이해하려면 저희의 기술 문서를 참조하십시오. 익스플로잇 워크스루 및 기술 - Ivanti Connect Secure RCE CVE-2025-0282 PoC 이 코드는 두 가지 모드로 작동합니다: 1. 일반 모드 2. 익스플로...
[SECURITY] Fedora 44 Update: openssl-3.5.8-1.fc44
The OpenSSL toolkit provides support for secure communications between machines. OpenSSL includes a certificate management tool and shared libraries which provide various cryptographic algorithms and protocols...
ivanti-cve-2023-35080-privilege-escalation-bof
Ivanti Connect Secure VPN विशेषाधिकार वृद्धि Ivanti Secure Access पूर्व में Pulse Secure विशेषाधिकार वृद्धि Cobalt Strike BOF CVE-2023-35080. द्वारा शोषण Alex और BOF द्वारा Tijme. द्वारा संभव बनाया गया Northwave Cyber Security विवरण यह एक Cobalt Strike CS Beacon Object File BOF और निष्पादन योग्य ...
PT-2026-84657
Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description A flaw exists where using a horizontal tab ASCII code 9 instead of a space ASCII code 32 immediately before the Secure attribute in a Set-Cookie: header causes the software to store the cookie...
PT-2026-84815
Multiple vulnerabilities in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality of Cisco Secure Email could allow an unauthenticated, remote attacker to recover plain text from encrypted email messages. These vulnerabilities are due to insufficient validation of messa...
CVE-2026-84308
phpseclib is a PHP secure communications library. Prior to 3.0.57 and...
PT-2026-84814
Name of the Vulnerable Software and Affected Versions Cisco Secure Email affected versions not specified Description Insufficient validation of message integrity in the Secure/Multipurpose Internet Mail Extensions S/MIME decryption functionality allows an unauthenticated remote attacker to recove...