472701 matches found
WPS-CVE-2022-24934
Warning THIS PROGRAM USE GENERIC WHICH IS INTRODUCED IN GO 1.18, UPGRADE YOUR COMPILER! CVE-2022-24934 Web Server for exploiting this vuln by utilizing wpsupdate.exe Fake WPS Update Server PoC Research Purpose Only. Download file Set the file you want to send to client as environment variable:...
CVE-2026-107640 Integrics Enswitch 3.13 through 4.4 Authentication Bypass via Password Reset API
Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter. Attackers can target accounts with no pending reset, whose empty resetkey match...
CVE-2026-107640
Integrics Enswitch versions 3.13 through 4.4 are vulnerable to an authentication bypass within the /api/json/user/password/update/ endpoint. The root cause is a weak password recovery mechanism where an unauthenticated attacker can change account passwords by omitting the reset parameter. By targ...
EUVD-2026-95027
Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter. Attackers can target accounts with no pending reset, whose empty resetkey match...
CVE-2023-7261
CVE-2023-7261 Google Chrome Updater DosDevices Local Privilege Escalation Vulnerability Details: This vulnerability allows local attackers to escalate privileges on affected installations of Google Chrome. An attacker must first obtain the ability to execute low-privileged code on the target syst...
Low: Red Hat Security Advisory: libxml2 security update
An update for libxml2 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
CVE-2022-24934
CVE-2022-24934 Vulnerability Overview WPS Office's updater wpsupdate.exe reads a custom update server address from the registry HKEYCURRENTUSER, downloads a custom update program, and executes it, leading to arbitrary code execution. Affected Versions WPS Office versions less than or equal to...
Orchestrated-Powershell-for-CVE-2023-24932-en
Secure Boot Mitigation Orchestrator Script Overview This PowerShell script automates the Secure Boot mitigation steps for CVE-2023-24932 , as outlined in the Microsoft Security Guidance. It handles the entire process, including registry updates, reboots, and event log validation, to ensure your...
CLSA-2026-1791464212 TuxCare security update for org.springframework (30 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 30 CVEs. Fixed in 4.1.9.RELEASE-tuxcare.2...
CVE-2026-104658
The Linux live-update apply helper hmailserver-update of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit ...
CLSA-2026-1791457895 TuxCare security update for io.projectreactor (1 CVE)
TuxCare rebuilt 3 io.projectreactor packages to address 1 CVE. Fixed in 3.4.41-tuxcare.1...
CLSA-2026-1791457538 TuxCare security update for org.antlr (3 CVEs)
TuxCare rebuilt 6 org.antlr packages to address 3 CVEs. Fixed in 4.13.0-tuxcare.1...
EUVD-2026-94832
The Linux live-update apply helper hmailserver-update of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit ...
CVE-2026-104658 Reliance on Untrusted Inputs in a Security Decision in hMailServer
The Linux live-update apply helper hmailserver-update of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit ...
CVE-2026-104658 Reliance on Untrusted Inputs in a Security Decision in hMailServer
The Linux live-update apply helper hmailserver-update of Progressive Robot hMailServer 6.3.4 and 6.3.5 runs as root on a request file written by the unprivileged hmailserver service account, and took from that request the program used to verify an AppImage update's signature and the systemd unit ...
CVE-2026-104658
Progressive Robot hMailServer versions 6.3.4 and 6.3.5 are vulnerable to a privilege escalation flaw in the hmailserver-update helper. The helper runs as root but processes a request file written by the unprivileged hmailserver service account. It improperly uses the program path for AppImage sig...
CLSA-2026-1791448365 TuxCare security update for mlflow (2 CVEs)
TuxCare rebuilt mlflow to address 2 CVEs. Fixed in 2.9.1.post13+tuxcare...
Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Security update 5.2.1 for Multi-Linux Manager Client Tools
This update fixes the following issues: scap-security-guide was updated to version 0.1.79: Version 0.1.79 jscECO-3319 Added SLE16 profiles to the build Create SLE16 HIPAA profile Create SLE16 PCI DSS 4 profile Use Sequoia in RHEL 10 instead of GPG New Profile for RHEL10: BSI Move RHEL Control fil...