PT-2026-113481

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A use after free issue in the Browser component allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page. Use after free ...

CVE-2026-84418

IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API...

CVE-2026-84418 DataStage on Cloud Pak for Data Improper Certificate Validation

IBM DataStage on Cloud Pak for Data 5.4.0.0 can allow a man-in-the-middle attacker to present a forged TLS certificate, intercept the connection, and capture the IAM bearer Authorization header automatically attached by the session adapter. The captured token grants full platform-scope tenant API...

CVE-2026-84418

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a man-in-the-middle attack due to improper certificate validation (CWE-295). An attacker can present a forged TLS certificate to intercept the connection and capture the IAM bearer Authorization header automatically attached by the sess...

CVE-2026-109598 Frappe before 16.33.0 Broken Authorization via send_sms Endpoint

Frappe Framework before 15.120.0 and 16.x before 16.33.0 contains a missing authorization vulnerability in the whitelisted sendsms API endpoint, which does not verify that the caller is permitted to send SMS messages. Users lacking the required permissions can invoke sendsms to send arbitrary SMS...

CVE-2026-109423

NetEase Cloud Music client for Windows cloudmusic.exe versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacker to intercept and decrypt HTTPS traffic by failing to validate the server certificate chain, verify the hostname, or...

CVE-2026-109423 NetEase Cloud Music TLS Certificate Validation Bypass

NetEase Cloud Music client for Windows cloudmusic.exe versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacker to intercept and decrypt HTTPS traffic by failing to validate the server certificate chain, verify the hostname, or...

EUVD-2026-97818

NetEase Cloud Music client for Windows cloudmusic.exe versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacker to intercept and decrypt HTTPS traffic by failing to validate the server certificate chain, verify the hostname, or...

CVE-2026-109423

The NetEase Cloud Music client for Windows (cloudmusic.exe ) versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability . The software fails to validate the server certificate chain, verify the hostname, or consult the Windows certificate trust store. A network-adjacent...

CVE-2026-6232 Out-of-bounds write in LR11xx Transceiver

An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can cause the firmware to write up to 254 arbitrary bytes past the bounds of an internal, non-persistent memory buffer...

CVE-2026-109297

The Open WebUI application versions 0.11.0 before 0.11.4 are vulnerable to a Denial of Service (DoS) attack via the automation recurrence-rule validator . The root cause is a discrepancy where the sub-daily frequency guard parses rule text more strictly than the underlying calendar library used f...

aclpwn.py

aclpwn.py Aclpwn.py es una herramienta que interactúa con BloodHound para identificar y explotar rutas de escalada de privilegios basadas en ACL. Toma un punto inicial y final y usará algoritmos de búsqueda de rutas de Neo4j para encontrar la ruta de escalada de privilegios basada en ACL más...

CVE-2026-109423: Improper Certificate Validation

NetEase Cloud Music client for Windows cloudmusic.exe versions 3.1.38 and 3.1.39.205426 contains a TLS certificate validation vulnerability that allows a network-adjacent attacker to intercept and decrypt HTTPS traffic by failing to validate the server certificate chain, verify the hostname, or...

PT-2026-110901

Name of the Vulnerable Software and Affected Versions NetEase Cloud Music client for Windows cloudmusic.exe version 3.1.38 NetEase Cloud Music client for Windows cloudmusic.exe version 3.1.39.205426 Description The application fails to validate the server certificate chain, verify the hostname, o...

EulerOS 2.0 SP13 : curl (EulerOS-SA-2026-4038)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 'Hello friends,', 'CVE-2026-8286: wrong STARTTLS connection reuse LOW', 'CVE-2026-8458: wrong reuse for different services LOW', 'CVE-2026-8924:...

CVE-2026-109310: Allocation of Resources Without Limits or Throttling

SiYuan v3.1.12 before v3.8.6 fails to restrict the Sprig template function map in the /api/icon/getDynamicIcon content parameter, allowing resource exhaustion. A publish reader, or anyone when publish auth is disabled, can use uncapped functions like until to OOM-kill the kernel with one request...

EulerOS 2.0 SP13 : curl (EulerOS-SA-2026-4129)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : 'Hello friends,', 'CVE-2026-8286: wrong STARTTLS connection reuse LOW', 'CVE-2026-8458: wrong reuse for different services LOW', 'CVE-2026-8924:...

CentOS Linux 7 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils (CENTOS7:CLSA-2026:1791496727)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1791496727 advisory. - A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate...

Amazon Linux 2 : awscli (ALAS-2026-3966)

The version of awscli installed on the remote host is prior to 1.18.147-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3966 advisory. Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has...

evilginx2

Evilginx 3.0 Evilginx es un framework de ataque de intermediario man-in-the-middle utilizado para el phishing de credenciales de inicio de sesión junto con cookies de sesión, lo que permite eludir la protección de autenticación de dos factores. Esta herramienta es la sucesora de Evilginx, lanzada...