CVE-2026-73594

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-73594

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-73594

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 and 5.36 are affected by an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could exploit this flaw to cause Information disclosure , Information tampering , and a...

EUVD-2026-88734

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism...

CVE-2026-73593

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism...

CVE-2026-73593

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are vulnerable to an Active Debug Code vulnerability. A high privileged attacker with local access could exploit this flaw to cause Information disclosure , Information tampering , Protection mechanism bypass , and Unau...

CVE-2026-73593

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism...

BIT-FLUENT-BIT-2026-61674 Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

CVE-2026-20079

CVE-2026-20079 Cisco Secure FMC PoC Python proof of concept for the publicly documented Cisco Secure Firewall Management Center authentication-bypass-to-root-RCE chain in CVE-2026-20079. This is not a new vulnerability or independently developed exploit chain. It is a clean-room implementation of...

CVE-2026-20251

CVE-2026-20251 — Splunk Secure Gateway jsonpickle デシリアライゼーション RCE 研究者: Fady Oueslati · ReactiveZero Security Research 参照: 2026FO-SPLUNK-20251 CVSS: 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H ステータス: 公開中 — パッチ提供済み 概要 低権限の認証済みユーザーが、KV ストア（mobilealerts コレクション）に細工されたドキュメントを保存することで、Splunk ホスト上で...

PT-2026-102510

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.36 Description An improper certificate validation issue exists where an unauthenticated attacker with adjacent network access can exploit the flaw. This may result in protectio...

PT-2026-102525

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An incorrect permission assignment for critical resources allows a low privileged attacker with local access to elevate their privileges. Recommendations...

PT-2026-102511

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.36 Description An unauthenticated attacker with remote access can exploit a Download of Code Without Integrity Check issue. This flaw allows the system to download code without...

PT-2026-102523

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An Initialization of a Resource with an Insecure Default exists, which allows a high privileged attacker with remote access to potentially achieve elevatio...

CVE-2020-12753-PoC

CVE-2020-12753-PoC このリポジトリには、LG Stylo 4 AMZ/Q710ULM 上で Secure EL3 の任意コード実行を可能にする SBL1/aboot の脆弱性 🔋📱❄️🥾🔓 の概念実証 PoC が含まれています。これは、アップデート 20a と 20c、およびこの脆弱性の SBL1 バリアントでのみテストされています。 - Makefile : sblrop.s と rawresources.img884736 から rawresourcesamod.img をビルドします - rawresources.img884736 : 元の rawresource...

http-pulse_ssl_vpn.nse

概要 Pulse Secure SSL VPN のファイル開示脆弱性を、特別に細工した HTTP リソースリクエスト経由で検出するシンプルな NSE スクリプトです。 このエクスプロイトは概念実証として /etc/passwd を読み取ります。 この脆弱性は次のバージョンに影響します（8.1R15.1、8.2 before 8.2R12.1、8.3 before 8.3R7.1、9.0 before 9.0R3.4）。 インストール $ git clone https://github.com/r00tpgp/http-pulsesslvpn.nse.git $ cd...

cve-2025-0282-ivanti_rce_reproduction

CVE-2025-0282 — Ivanti Connect Secure / Policy Secure / ZTA Gateways スタックベースのバッファオーバーフローによる RCE CVSS 9.0 — 重大 | 活発に悪用されているゼロデイ | 2025年1月に発見 概要 CVE-2025-0282 は、Ivanti Connect Secure ICS、Ivanti Policy Secure IPS、Ivanti ZTA Gateways の IFT/TLS 処理コンポーネントにおけるスタックベースのバッファオーバーフロー脆弱性 CWE-121 / CWE-787...

secure-vault-for-commercial

Secure Vault 📄 Documento técnico: SecureVaultTechnicalPaperv3.5.0.pdf · Citar en Zenodo Cifrado de archivos local-first para Windows, protegido por una llave USB física en lugar de una contraseña. ⚠️ v3.5.0 incluye una corrección de seguridad incompatible — consulta CHANGELOG.md antes de actualiza...

CVE-2025-0282

CVE-2025-0282 の PoC Ivanti Connect Secure、Ivanti Policy Secure、および Ivanti Neurons for ZTA ゲートウェイに影響を与える、リモート・認証不要のスタックベースのバッファオーバーフロー 概要 これは CVE-2025-0282 の悪用を実証するための概念実証エクスプロイトであり、watchTowr が公開した悪用手法に基づいています。 この PoC は、Ivanti Connect Secure 22.7r2.4 をターゲットとする ROP...

CVE-2025-47827

CVE-2025-47827 CVE-2025-47827 の概念実証および脆弱性レポート CVE-2025-47827。 Contents Description Disclosure Impact Detection Mitigation Binaries Proof of Concept Resources Description IGEL OS v11 以前では、igel-flash-driver モジュールが暗号署名を適切に検証しないため、セキュアブートを回避できます。 その結果、検証されていない SquashFS...