/
ttps_attack:T1203 × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

hacktron.ai · exploit público critical

Pre-auth RCE in OpenAM via jato.clientSession unsafe deserialization (CVE-2026-33439)

Hacktron AI researchers disclosed CVE-2026-33439 (CVSS 9.8, CWE-502), an unauthenticated remote code execution flaw in OpenIdentityPlatform OpenAM 16.0.5 and earlier. It is a variant of CVE-2021-35464: the earlier fix whitelisted deserialization for the jato.pageSession parameter but left the sibling jato.clientSession parameter unfiltere…

CVE-2026-33439 CVE-2021-35464
thezdi.com · critical

Microsoft October 2026 Patch Tuesday: record 1,415 CVEs, one exploited Windows Shell zero-day, plus 174 Adobe fixes

Microsoft's October 2026 Patch Tuesday is a record release of roughly 1,415 new CVEs, the first four-digit volume ever, larger than any previous full year of Microsoft patches. Only one flaw is under active attack: CVE-2026-96951, a Windows Shell security feature bypass that evades Mark of the Web (MotW) protections. Two others are public…

CVE-2026-96951 CVE-2026-108398 CVE-2026-92707