864 matches found
CVE-2021-31166-Exploit
CVE-2021-31166-Exploit Exploit for MS Http Protocol Stack RCE vulnerability CVE-2021-31166 A specially crafted Http request targetting a vulnerable windows version will result into DOS attack. And the server will be rebooted with blue screen error. Http.sys is a windows kernel driver responsible...
windows-security-cve-2017-8543
Example InSpec Profile This example shows the implementation of an InSpec profile...
Zitadel - User Registration Bypass
The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. Due to a missing security check in versions prior to 2.64.0, 2.63.5, 2.62.7, 2.61.4, 2.60.4, 2.59.5, and 2.58.7, disabling the "User Registration allowed" option only hid the...
CVE-2020-5902-F5-BIGIP
CVE-2020-5902-F5-BIGIP Scan from a given list for F5 BIG-IP and check for CVE-2020-5902...
EUVD-2025-211294
A time-of-check to time-of-use TOCTOU race condition in the AMD SEV Secure Encrypted Virtualization SEV firmware could allow an attacker with administrative privileges to bypass security checks on scatter lists, potentially resulting in loss of guest integrity...
CVE-2026-108178
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a token to be accepted that should be rejected due to an improperly implemented security check. Under certain conditions, token validation is incomplete, so a token may be accepted for a purpose it was not intend...
EUVD-2026-118913
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a token to be accepted that should be rejected due to an improperly implemented security check. Under certain conditions, token validation is incomplete, so a token may be accepted for a purpose it was not intend...
CVE-2026-108178
IBM API Connect (versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 ) contains a vulnerability where an improperly implemented security check allows a token to be accepted that should have been rejected. Under certain conditions, incomplete token validation may result in a token be...
CVE-2026-108178 Multiple Vulnerabilities in IBM API Connect
IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a token to be accepted that should be rejected due to an improperly implemented security check. Under certain conditions, token validation is incomplete, so a token may be accepted for a purpose it was not intend...
EUVD-2026-114893
Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http.ResourceIsolationRequestCycleListener obtains the page a request targets before it consults its resource isolation policies, because those policies are passed that page. Obtaining the page instantiates it, and...
CVE-2026-82898
Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http.ResourceIsolationRequestCycleListener obtains the page a request targets before it consults its resource isolation policies, because those policies are passed that page. Obtaining the page instantiates it, and...
PT-2026-135045
Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http.ResourceIsolationRequestCycleListener obtains the page a request targets before it consults its resource isolation policies, because those policies are passed that page. Obtaining the page instantiates it, and...
CVE-2026-82898: Apache Software Foundation Apache Wicket: Incorrect order of security checks in Apache Wicket
Incorrect order of security checks in Apache Wicket. org.apache.wicket.protocol.http.ResourceIsolationRequestCycleListener obtains the page a request targets before it consults its resource isolation policies, because those policies are passed that page. Obtaining the page instantiates it, and...
PT-2026-133726
Name of the Vulnerable Software and Affected Versions JetBrains Toolbox App versions prior to 3.9.1 JetBrains Toolbox App versions prior to 3.8.2 IntelliJ IDEA versions prior to 2026.3 IntelliJ IDEA versions prior to 2026.2.4 Description The jetbrainsd daemon improperly trusts compromised...
Exploit for CVE-2026-109618
PHP Security Check A read-only Bash-based inventory tool for...
Linux Distros Unpatched Vulnerability : CVE-2026-70174
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network. CVE-2026-70174 Note that Nessus relie...
Microsoft .NET Framework (October 2026)
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. CVE-2026-70007 -...
ALPINE-CVE-2026-70174
Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...