207365 matches found
CVE-2026-92222
The Joomla! Core software versions 4.0.0-5.4.8 and 6.0.0-6.1.3 are vulnerable to Server-Side Request Forgery (SSRF) . The root cause is improper validation of URLs used for server-side requests within various core extensions. This vulnerability allows an attacker to potentially induce the server ...
ProofCMS-
ProofCMS ProofCMS is a modular Python toolkit for detecting c...
CVE-2026-92371
TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording CSR functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged...
AZL-105885 CVE-2026-35191 affecting package rust 1.96.1-2
Issue summary: The OpenSSL QUIC server, when configured to not preform address validation, can be forced to count incoming packets multiple times in its unvalidated credit computation, leading to a violation of the RFC 9000 unvalidated connection amplification limit of 3 times the amount of data...
Improper Certificate Validation
Overview urllib3 is a HTTP library with thread-safe connection pooling, file post, and more. Affected versions of this package are vulnerable to Improper Certificate Validation in the connect method of src/urllib3/connection.py when an HTTPS proxy is configured with proxysslcontext while the targ...
CVE-2026-92371 Local Privilege Escalation via Improper Link Resolution in Cloud Session Recording
TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording CSR functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged...
EUVD-2026-89022
TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording CSR functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged...
CVE-2026-92371
Prior versions of TeamViewer Full Client and Host for Linux (before version 15.82 ) are vulnerable to a Local Privilege Escalation via improper link resolution in the Cloud Session Recording (CSR) functionality. A local authenticated attacker can exploit a race condition during path validation an...
CVE-2026-92371 Local Privilege Escalation via Improper Link Resolution in Cloud Session Recording
TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording CSR functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged...
Exploit for Improper Input Validation in Citrix Netscaler_Application_Delivery_Controller
cve-2026-88771-hunt A quick script...
Improper Certificate Validation
Netty is vulnerable to Improper Certificate Validation. The vulnerability is due to disabled TLS hostname verification in the SslProvider.OPENSSL client path under specific configurations, which allows a man-in-the-middle attacker to present a certificate issued for a different hostname and...
CVE-2026-73594
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-101266
A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...
CVE-2026-101269
A flaw in the mechanism binding API-uploaded files to specific authentication methods allows the same session token to be used for all token-based API users. Although the protection mechanism is rendered useless , the documents state there is virtually no risk because the uploaded files are refer...
CVE-2026-101269 Incorrect session validation for API-uploaded files
The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...
CVE-2026-101269 Incorrect session validation for API-uploaded files
The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...
CVE-2026-101269 Incorrect session validation for API-uploaded files
The mechanism binding API-uploaded files to the uploader's authentication method is not working correctly and the same session token is used for all token-based API users. Since API-uploaded files are refered to by randomly generated UUIDs and only exist for a day, there is virtually no risk, but...
EUVD-2026-88746
A logic flaw in the checkout flow allows users to bypass validations performed during the check-in by skipping entire check-in steps...