CVE-2026-69713

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

key-transparency-auditor

key-transparency-auditor 基于 密钥透明度 规范，为 Signal 的密钥透明度服务实现的一个第三方审计器参考实现。 概述 该服务使用 Java 编写，基于 Micronaut 框架。要构建并运行单元测试，请运行以下命令： root@kitploit: ./mvnw clean test 在根目录中执行。 主类是...

EUVD-2026-73603

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

Windows Secure Boot Security Feature Bypass Vulnerability

Dependency on vulnerable third-party component in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...

Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

Online dating app Grindr has opted to pay £26 million $35.1 million to settle a lawsuit in the U.K. over allegations that it shared users' personal information, including their HIV status, with third-parties. Grindr, which is the largest LGBTQ+ dating app, was sued in April 2024, accusing it of...

CVE-2018-0101-DOS-POC

CVE-2018-0101-DOS-POC DOS ソース : https://pastebin.com/YrBcG2Ln このPOCは私が公開したものではありません。自己責任で使用してください。...

CVE-2025-4102025

安全公告：CVE-2025-4102025 摘要 在 Copilot AI 中发现了一个严重漏洞，影响检索增强生成（RAG）操作后 Web 查询引用链接的渲染方式。当用户请求页面摘要或执行基于 Web 的查询时，所有后续引用链接 都被错误地链接到 https://www.collectingflags.com，无论信息的真实来源如何。 该缺陷损害了引用的完整性，误导了用户，并可能导致重定向到不受信任或恶意内容。 受影响产品 Copilot AI（所有支持 Web 连接的版本） 任何集成了 Copilot 且支持 RAG 引用功能的应用程序 漏洞详情 CVE ID：...

CVE-2026-84936

The EmbedPress WordPress plugin before 4.6.4 does not have proper authorization on a public review-loading action, allowing unauthenticated users to force the site to make repeated billable third-party API requests using the site's own configured API key, and to create an unbounded number of...

PyHmmm

PyHmmm 这是什么？ 这是一个用 Python 编写的 Havoc C2 第三方代理（agent）。它旨在作为一个基础 PoC，用于学习如何编写自定义 Havoc 代理，配套博客文章：https://codex-7.gitbook.io/codexs-terminal-window/red-team/red-team-dev/extending-havoc-c2/third-party-agents 功能 目前仅支持 2 个命令： shell system command exit 它 并非 旨在做到 OPSEC 安全或可安全用于实际环境。它原本是用来学习 Havoc...

CVE-2026-15933

OptimiDoc Server On-Premise stores credentials for external services in cleartext. An authenticated administrator can view previously configured service passwords, including SMTP, FTP for scan delivery, Active Directory for user list import, and SharePoint credentials, in cleartext via the web...

CVE-2026-18058

The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. When paired with a phishing attack, this manipulation could result in escalated privileges of an attacker within the system...

PT-2026-83284

Name of the Vulnerable Software and Affected Versions Hermes Agent versions 0.18.2 through 0.18.x Description A supply chain issue exists in the bundled MCP catalog. A remote attacker can execute arbitrary code by compromising a third-party upstream repository that is referenced via a mutable...

Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.

Summary Maximo AI Service uses keras-3.14.1, bcprov-jdk18on-1.84.jar, sentencetransformers-5.2.0-py3-none-any.whl, pillow-12.2.0-cp311-cp311-manylinux227x8664.manylinux228x8664.whl, tomcat-embed-core-10.1.55.jar, langgraphsdk-0.3.13-py3-none-any.whl, and transformers-4.57.5-py3-none-any.whl which...

CVE-2026-21753

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

CVE-2026-21753

HCL Hive is affected by weak software supply chain governance , which could result in the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment. The CNA-assigned CVSS 3.1 score is 4.2 (MEDIUM) , reflecting a network vector with high comple...

EUVD-2026-65470

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

CVE-2026-21753 HCL Hive is affected by multiple security vulnerabilities.

HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment...

CVE-2026-66766

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

EUVD-2026-65191

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

CVE-2026-66766 Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection)

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...