CVE-2026-105794 MsQuic: Improper Certificate Validation in Microsoft.Native.Quic.MsQuic.OpenSSL

MsQuic is a cross-platform C implementation of the IETF QUIC protocol exposed to C, C++, C, and Rust. Prior to 2.4.20, 2.5.11, and 2.6.1, MsQuic clients using the OpenSSL or QuicTLS TLS backend do not properly verify that a server certificate matches the intended target server hostname. An on-pat...

llm-council-vapt

LLM Совет — Валидация находок VAPT Слепой рецензируемый пайплайн, который проверяет находку пентеста до того, как она попадёт к клиенту. Независимые эксперты-линзы оценивают находку, проводят слепое рецензирование друг друга, а Председатель синтезирует одно проверенное заключение — стоит ли её...

CVE-2026-34498

An improper input validation vulnerability exists in Johnson Controls Illustra Standard - L4L China on Windows platforms. This flaw allows for OS Command Injection , specifically affecting versions before 6.0.0.66394 . The documents do not provide specific technical details regarding the vulnerab...

CVE-2026-34498 L4L

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394...

EUVD-2026-93398

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394...

Camera-Dahua-Research-l-h-ng-CVE-2021-33044

Моделирование эксплуатации обхода аутентификации Dahua PoC CVE-2021-33044 Обзор IP-камеры Dahua — это IoT-устройства, широко используемые в системах видеонаблюдения. Поскольку они часто развертываются в локальных сетях или доступны через Интернет, уязвимости безопасности в IP-камерах могут серьез...

CVE-2025-58440

CVE-2025-58440 Laravel FileManager におけるポリグロットファイル攻撃とヌルバイトインジェクションによるリモートコード実行（RCE） 概要 unisharp/laravel-filemanager パッケージのバージョン 2.11 は、ファイルアップロード時のファイルタイプ検証が不適切なため、リモートコード実行（RCE） に対して脆弱です。この脆弱性により、攻撃者はファイル拡張子の検証を悪用して、GIF 画像を装った悪意のある PHP ファイルをアップロードできます。具体的には、攻撃者は .php 拡張子にピリオド（.）を追加し、GIF89a;...

CVE-2026-5562-Exploit

CVE-2026-5562 익스플로잇 경고 이 저장소는 통제된 환경에서 노출 여부를 검증하기 위한 개념 증명PoC 연구 스크립트를 포함하고 있습니다. 연구 및 교육 목적으로만 사용해야 하며, 인가받지 않은 프로덕션 시스템에 사용해서는 안 됩니다. 요구 사항 설치 이 디렉터리에서 Python 의존성을 설치합니다: python3 -m pip install -r requirements.txt 명령줄 옵션 요청을 보내지 않고 내장 도움말을 표시합니다: python3 exploit.py --help Option| Required|...

CVE-2026-7574

🚨 CVE-2026-7574 — Обход целостности виртуальной машины Claude Desktop Cowork Обход целостности образа виртуальной машины Anthropic Claude Desktop Cowork 🔥 Локальная персистентность через подделку образа ВМ Слабость проверки целостности, позволяющая изменять образ файловой системы ВМ Claude Deskto...

OPENSUSE-SU-2026:22027-1 Security update for golang-github-prometheus-alertmanager

This update for golang-github-prometheus-alertmanager fixes the following issues: Changes in golang-github-prometheus-alertmanager: - CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.57.0 bsc1266615 - Update to version 0.33.1 jscPED-16708:...

CVE-2026-56596

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

CVE-2026-47101-PoC

CVE-2026-47101 — Повышение привилегий в LiteLLM через /key/generate + /user/update LiteLLM версии v1.82.6 до v1.83.14 эндпоинт /key/generate позволяет малопривилегированному internaluser запросить API-ключ с wildcard-маршрутом "/", а затем через эндпоинт /user/update повысить свою роль до...

EUVD-2026-93373

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

CVE-2026-56596 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

CVE-2026-56596

The HCL BigFix Service Management software is affected by an Improper Input Validation vulnerability (CWE-20). This flaw could allow an attacker to provide malformed or unexpected data, potentially leading to processing errors , business logic bypasses , and unintended application behavior . The ...

CVE-2026-56596 HCL BigFix Service Management is affected by multiple security vulnerabilities.

HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to supply unexpected or malformed data, enabling processing errors, business logic bypasses, and unintended application behavior...

keycloak-services: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. Thi...

netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation

A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin bailiwick of CNAME records in DNS...

keycloak-services: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. Thi...

keycloak-services: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions

A flaw was found in Keycloak. Keycloak's Security Assertion Markup Language SAML broker endpoint does not properly validate encrypted assertions when the overall SAML response is not signed. An attacker with a valid signed SAML assertion can exploit this by crafting a malicious SAML response. Thi...