29289 matches found
CVE-2019-25584 RarmaRadio 2.72.3 Server Field Buffer Overflow Denial of Service
RarmaRadio 2.72.3 contains a buffer overflow vulnerability in the Server field of the Network settings that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a malicious payload exceeding 4000 bytes into the Server field via the Settings...
VeryPDF Encrypt PDF 缓冲区错误漏洞
VeryPDF Encrypt PDF is a PDF encryption tool developed by the VeryPDF company. Version 2.3 of VeryPDF Encrypt PDF contains a buffer overflow vulnerability. This vulnerability stems from a buffer overflow in the password field, which could allow local attackers to cause the application to crash by...
CVE-2026-32940
creationtimestamp| type| source ---|---|--- 2026-03-20 23:15:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjnhynt6e2u 2026-03-29 16:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mi7lllxu6d2f 2026-03-29 16:40:10+00:00| seen|...
CVE-2026-33172
creationtimestamp| type| source ---|---|--- 2026-03-20 22:17:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjkb7iabx2c 2026-03-20 22:18:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjkcc7x4y2u 2026-03-21 02:21:20+00:00| seen|...
CVE-2026-3584
creationtimestamp| type| source ---|---|--- 2026-03-20 22:17:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjkasbyac2n 2026-03-20 22:18:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhjkbts2sw26 2026-03-21 02:25:48+00:00| seen|...
CVE-2026-32317
CVE-2026-32317 affects Cryptomator for Android prior to version 1.12.3. An integrity-check vulnerability allowed an attacker to tamper with the vault configuration file, causing a MITM in the Hub key loading mechanism by mixing endpoints and bypassing host authenticity checks. Impacted users unlo...
CVE-2026-32317 Cryptomator for Android: Tampered vault configuration allows MITM attack on Hub API
Cryptomator for Android offers multi-platform transparent client-side encryption for files in the cloud. Prior to version 1.12.3, an integrity check vulnerability allows an attacker tamper with the vault configuration file leading to a man-in-the-middle vulnerability in Hub key loading mechanism...
CVE-2026-32317 Cryptomator for Android: Tampered vault configuration allows MITM attack on Hub API
Cryptomator for Android offers multi-platform transparent client-side encryption for files in the cloud. Prior to version 1.12.3, an integrity check vulnerability allows an attacker tamper with the vault configuration file leading to a man-in-the-middle vulnerability in Hub key loading mechanism...
CVE-2026-32303 Cryptomator: Tampered vault configuration allows MITM attack on Hub API
Cryptomator encrypts data being stored on cloud infrastructure. Prior to version 1.19.1, an integrity check vulnerability allows an attacker to tamper with the vault configuration file leading to a man-in-the-middle vulnerability in Hub key loading mechanism. Before this fix, the client trusted...
CVE-2026-32303
Cryptomator CVE-2026-32303 affects the client prior to v1.19.1. The issue is an integrity-check vulnerability that lets an attacker tamper with the vault configuration file, triggering a MITM in the Hub key loading mechanism. Before the fix, the client could trust endpoints from vault.config with...
CVE-2026-32303 Cryptomator: Tampered vault configuration allows MITM attack on Hub API
Cryptomator encrypts data being stored on cloud infrastructure. Prior to version 1.19.1, an integrity check vulnerability allows an attacker to tamper with the vault configuration file leading to a man-in-the-middle vulnerability in Hub key loading mechanism. Before this fix, the client trusted...
CVE-2026-33316
creationtimestamp| type| source ---|---|--- 2026-03-20 13:50:31+00:00| published-proof-of-concept| https://github.com/go-vikunja/vikunja/security/advisories/GHSA-vq4q-79hh-q767 2026-03-24 22:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhtnepjgc42v 2026-03-24 22:53:23+00:00|...
CVE-2026-4434
Improper certificate validation in the PAM propagation WinRM connections allows a network attacker to perform a man-in-the-middle attack via disabled TLS certificate verification...
PT-2026-26660
Cryptomator for IOS offers multi-platform transparent client-side encryption for files in the cloud. Prior to version 2.8.3, an integrity check vulnerability allows an attacker tamper with the vault configuration file leading to a man-in-the-middle vulnerability in Hub key loading mechanism. Befo...
Fullchain 访问控制错误漏洞
Fullchain is an open-source CTF competition platform developed by CTFer.io. Versions of Fullchain prior to 0.1.1 contained access control vulnerability issues. These vulnerabilities were caused by incorrect network policy configurations, and could lead to lateral movement attacks...
Devolutions Server 安全漏洞
Devolutions Server is an application system developed by the Canadian company Devolutions. It provides a fully functional solution for shared accounts and password management. There is a security vulnerability in Devolutions Server, which stems from improper certificate verification. This...
CVE-2026-32011
creationtimestamp| type| source ---|---|--- 2026-03-19 22:19:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgzulvjoe2c 2026-03-19 22:19:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgzveubam2c 2026-03-24 05:20:09+00:00| seen|...
CVE-2026-22732
creationtimestamp| type| source ---|---|--- 2026-03-19 18:03:42+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/spring-security-advisory-av26-259 2026-03-19 23:25:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhh5kxyjyh25 2026-03-20 00:00:55+00:00| seen|...
ThreatsDay Bulletin: FortiGate RaaS, Citrix Exploits, MCP Abuse, LiveChat Phish & More
ThreatsDay Bulletin is back on The Hacker News, and this week feels off in a familiar way. Nothing loud, nothing breaking everything at once. Just a lot of small things that shouldn’t work anymore but still do. Some of it looks simple, almost sloppy, until you see how well it lands. Other bits fe...