PT-2026-113156

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-108971: Improper Verification of Cryptographic Signature

A flaw has been found in D-Link DCS-930L B1.08B4. This impacts the function mpfddecode of the file bootloaderregion.bin of the component Emergency HTTP Recovery Server. Executing a manipulation of the argument firmware can lead to improper verification of cryptographic signature. The attack may b...

PT-2026-113527

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An improper verification of cryptographic signatures allows for a security feature bypass. This issue enables an attacker to bypass security measures and obtain unauthorized...

DevTools Suite Compromise

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability allows an attacker to compromise the integrity of protected information through a specially created HT...

DevTools Suite Protected Information Access

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying data sources. Exploiting this vulnerability could allow an attacker to gain access to protected information...

CVE-2026-102250: Insufficient Verification of Data Authenticity

CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device...

CVE-2026-110097: Improper Authentication

Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers with a valid password to skip TOTP verification by reusing the login temp token. Attackers can present the temp token from the jwt/apply endpoint as a bearer JWT, refresh it, or use HTTP Basic login t...

CVE-2026-101294: Missing Cryptographic Step

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature...

PT-2026-113528

CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does no...

MiracleLinux 9 : python3.12-3.12.15-1.el9_8 (AXSA:2026-2025:25)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2025:25 advisory. python: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio CVE-2026-19553 python: Use-after-free of...

MiracleLinux 9 : python3.14-3.14.8-1.el9_8 (AXSA:2026-2028:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2028:08 advisory. python: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio CVE-2026-19553 python: Use-after-free of...

Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for September 2026.

Summary IBM SevOne Network Performance Management has addressed these security vulnerabilities in the Data Insight DI component with a Service Pack update. Please understand that the new use of security bulletins represents a change in our communication process, not an increase in security...

CVE-2024-42461

Solution for ECDSA and EDDSA Signature Verification Problems Description Problems have been identified in the verification of ECDSA and EDDSA signatures in the Wycheproof project. Missing checks during the signature decoding stage allow adding or removing zero bytes, which affects the ability to...

CVE-2024-40898

CVE-2024-40898 This Python script checks for the presence of CVE-2024-40898, a critical vulnerability in Apache HTTP Server that may allow SSL/TLS certificate verification bypass under certain misconfigurations. It initiates an SSL connection to the target server and sends a HEAD request. It...

CVE-2025-26465

CVE-2025-26465 The OpenSSH client contains a logic error between versions 6.8p1 to 9.9p1 inclusive that makes it vulnerable to an active MitM attack if the VerifyHostKeyDNS option is enabled, allowing a malicious interloper to impersonate a legitimate server when a client attempts to connect to i...

Apache-Log4j2-RCE

Apache Log4j2 RCE Verification Environment Since from 2021.12.09 Some References https://mp.weixin.qq.com/s/yck74F9p9QhVw3ykzVoSg Setting up the Environment Maven introduces related packages and vulnerable version range org.apache.logging.log4j log4j-api 2.14.1 org.apache.logging.log4j log4j-core...

cve-2026-0013-poc

CVE-2026-0013 Android DocumentsUI Confused Deputy Vulnerability - Security Research Verification Project Important Notice This repository is a derived build repository, affiliated with the original upstream repository. Role| Repository| Description ---|---|--- Main repository|...

CVE-2026-109365

Zebra before 6.4.0 contains an uncontrolled resource consumption vulnerability that allows unauthenticated peers to force full proof verification by serving forged block bodies with valid header hashes. Attackers can flip authorizing-only bytes such as a coinbase scriptSig, wasting Sapling,...

CVE-2026-109359

Contrast 1.8.0 before 1.24.1 contains an improper verification vulnerability in Coordinator peer recovery that fails to confirm the serving peer uses the same manifest generation. Attackers with write access to manifest history can replay a superseded history head so withdrawn workloads obtain...

CVE-2026-109307

Craft CMS 5.0.0 before 5.10.14 contains a DOM-based cross-site scripting vulnerability in the control panel login and 2FA verification flow, where a user-controlled returnUrl accepting javascript: URLs is used in client-side navigation. Attackers can lure a 2FA-enabled victim into opening a craft...