174613 matches found
CVE-2025-64649
IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation...
ssl-kill-switch3
SSL Kill Switch 3 Nuova generazione del tweak iOS SSLKillSwitch https://github.com/nabla-c0d3/ssl-kill-switch2 con molte più funzionalità! Cosa c'è di nuovo? RISOLTO Supporto Fishhook iOS 15+, ARM64/ARM64e, così puoi effettuare hook nell'era non-jailbreak RISOLTO Supporto Rootless iOS 15+,...
EUVD-2026-68013
Graylog is a free and open log management platform. Prior to Graylog Server versions 6.3.12, 7.0.7, and 7.1.2 and Graylog Forwarder version 7.3, the FortiGate key-value syslog parser in graylog2-server/src/main/java/org/graylog2/inputs/codecs/GLFortiGateSyslogEvent.java and...
ethibench
Dal Controllato al Selvaggio: Valutazione degli Agenti di Pentesting nel Mondo Reale Gli agenti di pentesting basati su intelligenza artificiale sono sempre più credibili come sistemi di sicurezza offensiva, ma i benchmark attuali forniscono ancora indicazioni limitate su quali sistemi otterranno...
buzzer
Buzzer - Una toolchain di fuzzing eBPF Buzzer è una toolchain di fuzzing che consente di scrivere strategie di fuzzing eBPF. Una strategia di fuzzing è un modo per generare programmi eBPF casuali e poi verificare che non abbiano comportamenti imprevisti. Per eseguire il fuzzer, segui i seguenti...
detection-validation
Detection-Validation Zweck Das Tool automatisiert die Simulation bösartiger Prozessereignisse, ohne dass reale Prozesse eingerichtet werden müssen. Angenommen, Sie möchten testen, wie w3wp.exe PowerShell startet. Normalerweise müssten Sie dafür eine IIS-Einrichtung durchlaufen, um...
EUVD-2026-66403
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device...
EUVD-2026-66391
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
EUVD-2026-66392
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
EUVD-2026-66393
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
EUVD-2026-66360
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device...
EUVD-2026-66401
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device...
EUVD-2026-66383
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device...
EUVD-2026-66364
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device...
EUVD-2026-66384
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device...
CVE-2025-64649
IBM Concert versions 1.0.0 through 2.3.1 are affected by improper certificate validation , allowing a remote attacker to perform unauthorized actions via man-in-the-middle techniques. The vulnerability carries a CVSS 3.1 score of 5.9 (MEDIUM) with a high attack complexity, no privileges required,...
CVE-2025-64649 Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 2.3.1 could allow a remote attacker to perform unauthorized actions using man in the middle techniques due to improper certificate validation...
CVE-2025-36290 IBM Integrated Analytics System (IIAS) is affected by improper SSL/TLS certificate validation vulnerability in JWT service component
IBM Integrated Analytics System 1.0.0.0 through 1.0.31.0 does not validate or improperly validates TLS certificate validation, which could allow an attacker to obtain sensitive information using man in the middle techniques...
CVE-2025-36290
IBM Integrated Analytics System (IIAS) versions 1.0.0.0 through 1.0.31.0 contain a vulnerability in the JWT service component (apjwtservice.py module), where SSL/TLS server certificate validation is not enabled on an SSL/TLS connection. This allows a remote attacker to perform man-in-the-middle a...
arc has unauthenticated cluster node admission when `cluster.shared_secret` is unset
Summary Arc Enterprise clustering accepts cluster join requests without authentication when cluster.enabled=true but cluster.sharedsecret is not configured. The coordinator validates HMAC authentication only if a shared secret is non-empty; otherwise, a network attacker who can reach the...