CVE-2026-55856

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, when a Java application connects with sslMode=verify-full or sslMode=verify-ca, supplies a password, and does not configure serverSslCert or trustStore,...

CVE-2026-82018

IGEL OS 12 before 12.9.0, 12.8.3 LTS and IGEL OS 11 before 11.11.150 contain a secure boot bypass vulnerability in the GRUB boot stage that allows physically present attackers to gain unauthorized root access by placing an unsigned empty file named igel.conf on a partition. Attackers can exploit...

BI Connector Optional Client Certificate Verification Allows Unauthenticated Connections

When mongosqld is configured with a client certificate authority file, the listener requests a client certificate during the TLS handshake but does not require one, so a client that presents no certificate is still accepted. In deployments that rely on client certificates as the sole means of...

MariaDB's connector leaks the cleartext password to an MitM despite `ssl: true`

Summary When SSL/TLS is enabled but no CA / server certificate is provided, the connector verifies the server's identity using fingerprint validation. The check is effective, the connection is ultimately rejected when it fails, but it happens after the authentication exchange. As a result, the...

CVE-2026-7458

🧨 CVE-2026-7458 – PickPlugins User Verification OTP-Bypass Nicht authentifizierte Authentifizierungsumgehung durch losen Vergleich in der OTP-Verifizierungs-REST-API PickPlugins User Verification ≤ 2.0.46 📖 Beschreibung Das User Verification -Plugin von PickPlugins für WordPress Versionen ≤ 2.0.4...

CVE-2024-55980

CVE-2024-55980 Wr Age Verification = 5.0.12 time-based blind - Parameter replace Payload:...

CVE-2025-7401

CVE-2025-7401 Premium Age Verification / Restriction for WordPress = 3.0.2 - Leitura e Escrita Arbitrária de Arquivos não Autenticada 🧾 Premium Age Verification / Restriction for WordPress = 3.0.2 — Leitura e Escrita Arbitrária de Arquivos não Autenticada 📝 Descrição O plugin "Premium Age...

CVE-2026-54746

Hatchet (a platform for orchestrating background tasks, AI agents, and durable workflows) is affected by a cross-tenant write/DoS vulnerability in the Dispatcher gRPC service . From version 0.40.0 to 0.91.1 , the UpsertWorkerLabels and Unsubscribe RPCs do not verify that the worker_id in the requ...

sec_review_cve-2024-3094

È stata condotta una revisione completa della sicurezza della vulnerabilità open source CVE-2024-3094. Sulla base dei dati raccolti, sono stati preparati: 1. Report «ThreatModel + SecurityReview» – descrizione dettagliata delle minacce, percorsi di sfruttamento, valutazione del rischio e...

Real Estate

Open Arsenal: Specifiche Immobiliari L'ecosistema immobiliare è costruito attorno all'idea di spostare l'intelligence immobiliare dalle piattaforme centralizzate di annunci verso ambienti dati auto-sovrani ospitati localmente. Invece di fare affidamento su piattaforme di terze parti per definire,...

CVE-2025-55182-Scanner

CVE-2025-55182 Hybrid Security Scanner Uno scanner di sicurezza ibrido e professionale, progettato per colmare il divario tra analisi statica e capacità di sfruttamento dinamico per la CVE-2025-55182. Questo strumento serve sia gli sviluppatori sicurezza shift-left sia i professionisti della...

EUVD-2026-67444

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs There is a wrong upper limit check for the domain value when an EP11 CPRB is processed for sending to a crypto card. This check is only active on custom device node...

CVE-2026-80709 s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs There is a wrong upper limit check for the domain value when an EP11 CPRB is processed for sending to a crypto card. This check is only active on custom device node...

CVE-2026-80709

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs There is a wrong upper limit check for the domain value when an EP11 CPRB is processed for sending to a crypto card. This check is only active on custom device node...

otp-bot

SMSBotBypass Paypal, Instagram, Snapchat, Google, 3D Secure 및 기타 여러 서비스의 SMS 인증을 Discord 봇 또는 비공개 API를 사용하여 우회하세요. 정말 간단합니다. 친구가 Snapchat 계정을 가지고 있다고 상상해 보세요. sms 시스템을 사용하여 그의 비밀번호를 재설정하려고 합니다 : 그는 sms 확인 코드를 받게 될 것입니다. 그런 다음 봇을 사용합니다 !call 33612345678 snapchat. 봇이 snapchat 서비스를 사용하여 그에게 전화를 걸어 수...

SMSBotBypass

SMSBotBypass Bypassa le verifiche SMS di Paypal, Instagram, Snapchat, Google, 3D Secure e molti altri... usando un Bot Discord o l'API privata. È davvero semplice. Immagina che il tuo amico abbia un account Snapchat, provi a reimpostare la sua password usando il sistema SMS : riceverà il codice d...

CVE-2021-2109_poc

weblogicCVE-2021-2109poc weblogic CVE-2021-2109 Massenverifikations-PoC Verwendung: Laden Sie zunächst auf einem anderen Server JNDIExploit.jar herunter und führen Sie java -jar JNDIExploit.jar -i ip aus. Dann legen Sie die zu überprüfenden IPs in der Datei urls.txt ab und führen Sie dieses Skrip...

nogotofail

nogotofail Nogotofail è uno strumento di test della sicurezza di rete progettato per aiutare sviluppatori e ricercatori di sicurezza a individuare e correggere connessioni TLS/SSL deboli e traffico in chiaro sensibile su dispositivi e applicazioni in modo flessibile, scalabile e potente. Include...

p5-ssl-tools

Raccolta di Strumenti SSL Questo repository contiene vari strumenti, pensati per eseguire il debug o analizzare problemi relativi a SSL/TLS. Analisi dello stato di TLS analyze-ssl.pl verifica il supporto per varie versioni di SSL/TLS verifica quali cifrari sono supportati verifica il certificato...

SUSE CVE-2026-75803

Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...