openssh: OpenSSH: Security restriction bypass via unenforced restrict directive in tunnel forwarding

A flaw was found in OpenSSH. In configurations where tunnel forwarding is enabled on the server, the restrict option in the authorized keys configuration fails to properly block tunnel forwarding requests. An authenticated user connecting with a restricted key can exploit this issue to bypass...

DEBIAN-CVE-2026-109709

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109709

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CLSA-2026-1791896844 TuxCare security update for org.springframework.ws (7 CVEs)

TuxCare rebuilt 7 org.springframework.ws packages to address 7 CVEs. Fixed in 4.0.11-tuxcare.1...

asterion-network-minotaur

Ethical network security auditor — 50+ checks across SMB, RDP, LDAP, SSH, Kerberos and more, with AI-powered CVE analysis and OWASP/CIS/NIST compliance mapping. Quick Start · Documentation · Docker · AI Features · Star on GitHub In Action Local scan · 127.0.0.1 ·...

cve-2018-2628

cve-2018-2628 Vulnerability Reproduction...

Apache Struts 2 - Remote Command Execution

Apache Struts 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 is susceptible to remote command injection attacks. The Jakarta Multipart parser has incorrect exception handling and error-message generation during file upload attempts, which can allow an attacker to execute arbitrary commands via a...

CLSA-2026-1791895043 TuxCare security update for org.springframework.ws (7 CVEs)

TuxCare rebuilt 6 org.springframework.ws packages to address 7 CVEs. Fixed in 3.1.7-tuxcare.1...

ManageEngine-CVE-2020-28653

This repository does not have a README...

CVE-2021-28235

This repository does not have a README...

CVE-2026-109746

A mitigation bypass exists in the DOM: Security component of the Firefox web browser. This vulnerability was addressed in Firefox 158 . No specific root cause, practical consequences, or exploit details are provided in the documents.

CVE-2026-109734

A mitigation bypass exists in the DOM: Security component of Firefox . This vulnerability was addressed in Firefox 158 and Firefox ESR 153.5 . The issue is reported to have a moderate impact. No specific exploit details or technical root causes are provided in the documentation beyond the compone...

EUVD-2026-98486

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109709 Information disclosure, privilege escalation in the Security: Process Sandboxing component

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109709

The Security: Process Sandboxing component in Firefox and Thunderbird is vulnerable to information disclosure and privilege escalation . This security flaw was addressed in Firefox 158 , Firefox ESR 153.5 , Thunderbird 158 , and Thunderbird 153.5 . Details regarding specific exploit paths or in-t...

CVE-2026-109709 Information disclosure, privilege escalation in the Security: Process Sandboxing component

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-109709

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2019-7357

This repository does not have a README...

Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks.

Simulating-and-preventing-Zerologon-CVE-2020-1472-vulnerability-attacks. Simulation of the Zerologon CVE-2020-1472 vulnerability attack in Active Directory on Windows Server 2016 and the use of the Trend Micro Deep Security solution to prevent such attacks. The Zerologon vulnerability is a weakne...

detecttrace

DetectTrace A detection should have fired. It didn't. DetectTrace tells you exactly why. DetectTrace is an open-source detection engineering tool for testing security detections end to end and localising the first failing stage. Instead of testing only a SIEM query, DetectTrace treats a detection...