CVE-2026-84271

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2026-84271

IBM Guardium Data Protection 12.2 contains a signature verification bypass vulnerability within the patch installer. An attacker with local access could exploit this flaw to achieve arbitrary code execution with root privileges . The root cause is identified as a race condition (CWE-362). No spec...

EUVD-2026-95240

IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer. An attacker with local access could exploit this vulnerability to execute arbitrary code with root privileges...

CVE-2025-56224

CVE-2025-56224（OTP）验证绕过 描述 攻击者可以冒充其他用户的手机号码，并利用此漏洞在不知道 OTP 验证码的情况下验证该号码。 CVSS 评分：8.1（高危） 攻击类型 远程（已认证） 受影响版本 8.6.8 及之前的版本 产品供应商 Ascertia 受影响产品代码库 SigningHub 受影响组件 手机号码验证功能。 缓解措施 如果尝试次数超过一定值，则撤销 OTP 验证码。 漏洞详情 该应用程序未对一次性密码（OTP）验证端点实施适当的速率限制。这允许攻击者在不受限制的情况下自动化并暴力破解 OTP 验证码。通过快速连续发送大量 OTP...

CVE-2026-6274

CVE-2026-6274：Redline WR3200 身份验证绕过 English | Turkish 本仓库包含 CVE-2026-6274 的技术细节和概念验证（PoC）。该漏洞存在于 Redline WR3200 路由器（固件版本 v7.1.8 之前）中，允许攻击者在不知道当前凭据的情况下绕过身份验证并更改管理员密码。 技术分析 该漏洞源于两个主要安全缺陷： 1. 静态 Cookie 身份验证： 路由器依赖静态 cookie（user=admin&platform=1）来识别管理会话。 2. IP 验证绕过： 虽然大多数端点要求基于 IP...

CVE-2026-88647

A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communications via a crafted certificate...

CVE-2026-8080-DKIM-Signature-Verification-Bypass-Header-Canonicalization-Flaw-

CVE-2026-8080 – DKIM 签名验证绕过（头部规范化缺陷） 程序代码（Python 邮件解析模拟） dkimverifiersim.py - Flawed DKIM verifier import re, hashlib Simulated email with DKIM signature rawemail = b"""From: [email protected] To: [email protected] Subject: Hello DKIM-Signature: v=1; a=rsa-sha256; d=example.com; s=mail;...

CVE-2026-107660

FFmpeg versions prior to 8.1.3 and 9.x before 9.0.2 are vulnerable to an improper certificate validation flaw in the tls_open() function within libavformat/tls_mbedtls.c. The root cause is that the software skips hostname checks for hosts identified by IP addresses. This allows a network attacker...

CVE-2026-107660 FFmpeg before 8.1.3 and 9.x before 9.0.2 mbedTLS Hostname Verification Bypass for IP Hosts

FFmpeg before 8.1.3 and 9.x before 9.0.2 contains an improper certificate validation vulnerability in tlsopen of libavformat/tlsmbedtls.c, which skips hostname checks for IP-address hosts. Network attackers can intercept https, rtmps, or tls connections to IP-literal URLs with any trusted CA-issu...

CVE-2026-107275

@fastify/jwt is a JSON Web Token plugin for the Fastify web framework. In versions before 10.2.3, a time span passed to expiresIn, notBefore, or maxAge that the plugin's parser cannot read, such as a compound span, a month unit, an ISO 8601 duration, a decimal comma, or a value with surrounding...

gosign-desktop-exploit-poc

GoSign Desktop 中的多个漏洞导致远程代码执行 名称: GoSign Desktop 中的 TLS 验证绕过和不安全更新 CVEs: CVE-2025-34324, CVE-2025-34327 受影响系统: GoSign Desktop = 2.4.0 修复: FoSign Desktop 2.4.1（ 部分修复 ） 供应商: Tinexta InfoCert S.p.A. 严重性: 高 8.2/10 CVSS 3.1: AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H 公告:...

python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()

A flaw was found in Python. When establishing secure connections using the SSLContext.wrapbio function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rathe...

Important: Red Hat Security Advisory: python3.12 security update

An update for python3.12 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()

A flaw was found in Python. When establishing secure connections using the SSLContext.wrapbio function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rathe...

Important: Red Hat Security Advisory: python3.14 security update

An update for python3.14 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio()

A flaw was found in Python. When establishing secure connections using the SSLContext.wrapbio function with hostname checking enabled, the module fails to validate that a target server hostname is supplied. Because of this missing check, certificate hostname verification is silently skipped rathe...

Important: Red Hat Security Advisory: python3.14 security update

An update for python3.14 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...

python3.12 security update

An update is available for python3.12. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...

AVTECH DVR - Login Verification Code Bypass

AVTECH DVR products are vulnerable to verification code bypass just by entering the "login=quick" parameter to bypass verification code. id: CVE-2013-4982 info: name: AVTECH DVR - Login Verification Code Bypass author: ritikchaddha severity: low description: | AVTECH DVR products are vulnerable t...

CLEANSTART-2026-KL61134 application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store

Security vulnerability affects the apache-nifi-registry package. An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store...