CVE-2026-29000

CVE-2026-29000 — Contournement d'authentification JWE pac4j-jwt Laboratoire CTF étudiant la vulnérabilité d'authentification JWE dans la bibliothèque pac4j-jwt CVSS 9.3 Critique · CWE-287 · Versions concernées : pac4j-jwt ← accès au panneau admin ↓ Lecture de données sensibles : liste des employé...

CVE-2026-25250 — Updated!

🕷️ CVE-2026-25250: Improper Trusted Bootloader Chain Validation A Microsoft-signed third-party bootloader that loads a secondary EFI binary with no signature or integrity verification, collapsing the Secure Boot chain of trust from within. 📑 Table of Contents Research Context Official References...

CVE-2026-29000

CVE-2026-29000 : Preuve de concept PoC pour le contournement d'authentification pac4j-jwt ⚠️ Avertissement Cet outil est destiné uniquement à des fins de tests de sécurité éthiques et éducatifs. Je ne soutiens et ne soutiendrai en aucun cas les actes malveillants, sous quelque forme que ce soit...

zeroheight-account-verification-bypass-CVE-2025-65925

CVE-2025-65925 — Zeroheight Incorrect Access Control in Account Creation Flow Disclosure Date: 2025-06-11 Vendor fix date per vendor: 2025-06-13 Researcher validation date: 2025-06-26 Discovered by: Sneden Rebello Summary A legacy user creation API pathway allowed accounts to be created without...

cosmicsting-validator

A Cosmicsting POC, with a bash script to check all of our hosted sites to confirm the patch. This repository is provided to allow store owners / hosts to confirm the patch is applied on stores. Within check.bash add domains to the SITES list. https://www.sdj.pw/posts/magento2-cosmic-sting-check/...

CVE-2026-6274

CVE-2026-6274: Redline WR3200 인증 우회 English | Turkish 이 저장소는 CVE-2026-6274 에 대한 기술적 세부 정보와 개념 증명PoC을 포함합니다. 이 취약점은 Redline WR3200 라우터펌웨어 v7.1.8 이전 버전에 존재하며, 공격자가 현재 자격 증명을 알지 못한 채 인증을 우회하고 관리자 비밀번호를 변경할 수 있게 합니다. 기술 분석 이 취약점은 두 가지 주요 보안 결함에서 비롯됩니다: 1. 정적 쿠키 인증: 라우터는 관리자 세션을 식별하기 위해 정적...

CVE-2026-35616

CVE-2026-35616 Auteur : wa6n3r | GitHub | Web Description Exploitation de la vulnérabilité de contournement de la vérification de la chaîne de certificats dans l'API Fortinet. Le script détecte automatiquement les Common Name CN valides à partir de diverses sources, génère un certificat client...

CVE-2026-53671

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the abstract transformer in prevail treats writes through a TCTX-typed base register as a silent no-op: domemstore in src/crab/ebpftransformer.cpp only models TSTACK stores, and the...

CVE-2026-53706

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit...

CVE-2026-53670 PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...

CVE-2026-53670 PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, in the Prevail eBPF verifier, EbpfTransformer::add silently skips offset-variable updates when the destination register carries a non-singleton typeset two or more simultaneously possible...

CVE-2026-53670

PREVAIL , a polynomial-runtime eBPF verifier using an abstract interpretation layer, is vulnerable to a verifier bypass prior to version 0.2.4 . In the EbpfTransformer::add() function, offset-variable updates are silently skipped when the destination register carries a non-singleton typeset (two ...

CVE-2026-53671 PREVAIL: Context-write no-op in do_mem_store allows unsafe eBPF programs to pass verification

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the abstract transformer in prevail treats writes through a TCTX-typed base register as a silent no-op: domemstore in src/crab/ebpftransformer.cpp only models TSTACK stores, and the...

CVE-2026-53671

PREVAIL is a polynomial-runtime eBPF verifier. Prior to version 0.2.4 , its abstract transformer in do_mem_store (src/crab/ebpf_transformer.cpp) silently ignores writes through a T_CTX -typed base register, and the checker's T_CTX bounds arm never tests AccessType::write. An attacker can craft an...

CVE-2026-53671 PREVAIL: Context-write no-op in do_mem_store allows unsafe eBPF programs to pass verification

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the abstract transformer in prevail treats writes through a TCTX-typed base register as a silent no-op: domemstore in src/crab/ebpftransformer.cpp only models TSTACK stores, and the...

CVE-2026-32794

CVE-2026-32794: تجاوز التحقق من شهادة TLS في موفّر Databricks في Apache Airflow الكلمات المفتاحية: TLS، التحقق من الشهادة، MITM، Kubernetes، Databricks، OAuth، CWE-295، Apache Airflow المحتويات نظرة عامة تفاصيل الثغرة التحليل الفني سلسلة الهجوم الأثر العلاج الجدول الزمني المراجع التواصل إخلاء...

CVE-2026-83533

The WP Express Checkout WordPress plugin before 2.4.9 does not verify server-side that a payment was actually completed before marking an order as paid, allowing unauthenticated users to forge a completed order without paying...

CVE-2026-82955

In the current development version of Eclipse aeriOS, which has not yet had an official release, the KrakenD instance included in the API Gateway component had the disablejwksecurity parameter hard-coded to true, with no option to override it through the Helm chart configuration. This setting...

CVE-2026-82955

In the current development version of Eclipse aeriOS, which has not yet had an official release, the KrakenD instance included in the API Gateway component had the disablejwksecurity parameter hard-coded to true, with no option to override it through the Helm chart configuration. This setting...

EUVD-2026-70056

In the current development version of Eclipse aeriOS, which has not yet had an official release, the KrakenD instance included in the API Gateway component had the disablejwksecurity parameter hard-coded to true, with no option to override it through the Helm chart configuration. This setting...