1489794 matches found
Windows BitLocker Security Feature Bypass Vulnerability
Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
July 14, 2026—KB5099445 (Monthly Rollup)
None None...
July 14, 2026—KB5099540 (OS Build 20348.5386)
None None...
July 14, 2026—KB5099539 (OS Builds 19045.7548 and 19044.7548)
None None...
July 14, 2026—KB5101650 (OS Builds 26200.8875 and 26100.8875)
None None...
CVE-2026-24733
CVE-2026-24733 What is CVE-2026-24733? Apache Tomcat incorrectly handled an HTTP/0.9-style HEAD request under certain security-constraint configurations. CVE-2026-24733 Defensive Verifier A lightweight, dependency-free Python security verifier for CVE-2026-24733 , an Apache Tomcat HTTP/0.9 HEAD...
PortSwigger-Web-Security-Academy
PortSwigger-Web-Security-Academy The interesting cases and m0r3 With nu11secur1ty 😎 Report as of June 2022 JWT - Module:...
Adhrit
Adhrit is an open source Android APK reversing and analysis suite. The tool is an effort to find an efficient solution to all the needs of mobile security testing and automation. Adhrit has been built with a focus on flexibility and mudularization. Adhrit currently uses the Ghera benchmarks to...
CVE-2026-74032 Wazuh 4.0.0 before 4.14.8 RBAC Authorization Bypass via /security/actions
Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated users to read the RBAC catalog by querying unprotected security endpoints. Attackers can request GET /security/actions and /security/resources, which omit the caller's RBAC...
CVE-2026-74032
Wazuh versions 4.0.0 through 4.14.7 are vulnerable to an authorization bypass (CWE-863) that allows low-privileged authenticated users to access the RBAC catalog. By querying unprotected endpoints such as GET /security/actions and GET /security/resources , which fail to apply the caller's RBAC po...
CVE-2026-109959 EspoCRM 4.0.0 before 10.0.7 Field-Level Security Bypass via Note Read Endpoint
EspoCRM 4.0.0 before 10.0.7 contains an access control vulnerability that allows authenticated users to read audited field values restricted by field-level security by fetching individual stream notes. Users with stream access to a parent record can request GET /Note/id, which skips the...
CVE-2026-109959
EspoCRM versions 4.0.0 before 10.0.7 are vulnerable to an access control flaw. Authenticated users with stream access to a parent record can bypass the NoteAccessControl filter by requesting GET /Note/{id}. This allows them to read audited field values restricted by field-level security , specifi...
CVE-2026-109952 FreeRDP 3.0.0 before 3.32.0 Security Protocol Downgrade via Negotiation Response
The FreeRDP client 3.0.0 before 3.32.0 does not check a server-selected PROTOCOLRDSTLS or PROTOCOLHYBRIDEX against its enabled protocol set in negoprocessnegotiationresponse, allowing a security protocol downgrade. A malicious server or man-in-the-middle can select RDSTLS to override /sec:nla...
CVE-2026-90062
A flaw was found in the Linux kernel's netfilter subsystem, specifically within the nftables component. This vulnerability occurs because the hardware offload step for network filtering rules is performed before the complete set of rules chain blob is built. This timing issue can lead to an...
CVE-2026-90094
A flaw was found in the Linux kernel, affecting the arm64 architecture's process context switching. When a user enables the Memory Tagging Extension MTE store-only tag check mode, the associated security setting SCTLREL1.TCSO0 is not properly reset during a task switch. This oversight allows the...
openssh: OpenSSH: Security restriction bypass via unenforced restrict directive in tunnel forwarding
A flaw was found in OpenSSH. In configurations where tunnel forwarding is enabled on the server, the restrict option in the authorized keys configuration fails to properly block tunnel forwarding requests. An authenticated user connecting with a restricted key can exploit this issue to bypass...
DEBIAN-CVE-2026-109709
Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
