Zitadel - User Registration Bypass

The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...

CVE-2021-31166-Exploit

CVE-2021-31166-Exploit Exploit for MS Http Protocol Stack RCE vulnerability CVE-2021-31166 A specially crafted Http request targetting a vulnerable windows version will result into DOS attack. And the server will be rebooted with blue screen error. Http.sys is a windows kernel driver responsible...

CVE-2020-5902-F5-BIGIP

CVE-2020-5902-F5-BIGIP Scan from a given list for F5 BIG-IP and check for CVE-2020-5902...

Exploit for CVE-2026-109618

PHP Security Check A read-only Bash-based inventory tool for...

Linux Distros Unpatched Vulnerability : CVE-2026-70174

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-70174 Note that Nessus relie...

windows-security-cve-2017-8543

Example InSpec Profile This example shows the implementation of an InSpec profile...

Microsoft .NET Framework (October 2026)

The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. CVE-2026-70007 -...

EUVD-2026-99690

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-70174

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-70174

The .NET runtime is vulnerable to a Remote Code Execution (RCE) flaw due to an improperly implemented security check for standard . An unauthorized attacker can exploit this vulnerability over a network to execute arbitrary code. The vulnerability has a CVSS score of 8.80 and is categorized under...

CVE-2026-90177

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier. This vulnerability arises because the atomic Read-Modify-Write RMW verification process does not consistently check pointer types across all execution paths. Specifically, it only records the instruction pointer type when...

.NET Remote Code Execution Vulnerability

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-70174

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-70174: Improperly Implemented Security Check for Standard

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

Microsoft .NET: CVE-2026-70174: .NET Remote Code Execution Vulnerability

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

PT-2026-113068

Name of the Vulnerable Software and Affected Versions Microsoft PowerShell affected versions not specified Description An improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature over a network. Recommendations At the...

PT-2026-112772

Name of the Vulnerable Software and Affected Versions Windows PowerShell affected versions not specified Description An improperly implemented security check for standard input in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network. Recommendations At th...

CVE-2026-107697 FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()

FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowedextensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use disallowed protocols or non-multimedia...

CVE-2026-107697

FFmpeg versions before 8.1.3 are vulnerable to a protection mechanism failure in the HLS demuxer . An attacker can provide a crafted master playlist that causes the parse_playlist() function to open child playlists using disallowed protocols or non-multimedia local files. This bypasses existing p...

CVE-2026-107697 FFmpeg before 8.1.3 HLS Demuxer Security Check Bypass via parse_playlist()

FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowedextensions restrictions when opening child playlists. Attackers can supply a crafted master playlist whose child playlists use disallowed protocols or non-multimedia...