195 matches found
PyJWT HMAC Algorithm Bypass
The vulnerability of the HMACAlgorithm.preparekey function in the jwt/algorithms.py library of PyJWT is related to errors in cryptographic signature verification. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms remotely...
Rocky Linux 9 [CIQ] Security Update: xdg-utils (crlsa-2025_7672)
The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20257672 advisory. xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments CVE-2022-4055 Tenable has extracted the preceding descripti...
dispatchRequest() function in the Security Bypass
The vulnerability of the dispatchRequest function in the axios library is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability can allow a remote attacker to bypass existing security mechanisms...
ROS-20260910-73-0097
The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...
phpMyFAQ isAddingQuestionsAllowed Bypass
The vulnerability of the isAddingQuestionsAllowed function in the phpMyFAQ web application is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to bypass existing security measures remotely...
Rsync auth_server Bypass
The vulnerability of the authserver function in the Rsync file transfer and synchronization utility is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...
Permissions Component Compromise Data Compromise
The vulnerability of the Permissions component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created HTML page...
ROS-20260831-73-0007
The vulnerability of the HTTP/2 implementation in the Go programming language is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms remotely...
Firefox Thunderbird Security Bypass
Vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the lack of data security mechanisms. Exploiting this vulnerability allows a malicious actor to access confidential data and compromise its integrity...
CVE-2026-40355
In MIT Kerberos 5 aka krb5 before 1.22.3, there is a NULL pointer dereference if an application calls gssacceptseccontext on a system with a NegoEx mechanism registered in /etc/gss/mech. An unauthenticated remote attacker can trigger this, causing the process to terminate in parsenegomessage...
ROS-20260121-73-0037
A vulnerability in the x86/mm component of the Linux operating system kernel is related to a flaw in the data security mechanism. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
EUVD-2019-17631
Malware in sbrugna...
EUVD-2005-0139
Malware in sbrugna...
EUVD-2019-4986
Malware in sbrugna...
EUVD-2020-4270
Malware in sbrugna...
EUVD-2020-7498
Malware in sbrugna...
EUVD-2022-40565
Malicious code in bioql PyPI...
EUVD-2024-47041
Malicious code in bioql PyPI...