121855 matches found
CVE-2026-85432 MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity
MOOS core-moos through 10.4.0 fails to validate client identity in MOOSDB message processing, allowing authenticated attackers to attribute writes to other clients by supplying arbitrary source identifiers in serialized messages. Attackers can forge message origins and cancel third-party...
CVE-2026-85431 MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection
MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen. Attackers can send crafted UDP packets to the configured port to inject arbitrary variables into the local MOOS community with spoofed source an...
CVE-2026-85429 MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing
MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODEMESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notifications without...
CVE-2026-85429
MOOS-IvP uFldNodeComms (through version 24.8.1) trusts the source node identity from the message body rather than validating it against the connection source. An attacker can craft NODE_MESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notificat...
CVE-2026-85429 MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing
MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODEMESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notifications without...
CVE-2026-85429 MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing
MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source. Attackers can craft NODEMESSAGE packets with spoofed source identities to impersonate other nodes and post arbitrary variable notifications without...
CVE-2026-85046
creationtimestamp| type| source ---|---|--- 2026-09-03 21:47:45+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mungh3gwwk2c 2026-09-04 04:13:09+00:00| seen| https://bsky.app/profile/shiojiri.com/post/3muo3xqmoksah 2026-09-04 04:46:03+00:00| seen|...
CVE-2026-8862 Vulnerabilities exists in IBM Netezza Software
IBM Netezza Software 11.3.0.3 through Interim Fix 002 has credentials that are hardcoded in the application source code, allowing unauthorized access to the container registry. The exposed secret enables attackers to pull private container images, potentially revealing proprietary code,...
File Inclusion at postcss Dependency in Bamboo Data Center
This High severity File Inclusion vulnerability was introduced in versions 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center. This File Inclusion vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N allows an unauthenticated...
CVE-2026-83497
creationtimestamp| type| source ---|---|--- 2026-09-03 20:32:54+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3muncbakmfo25...
CVE-2026-85048
creationtimestamp| type| source ---|---|--- 2026-09-03 20:00:43+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117208884349943959 2026-09-04 04:46:16+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260904 2026-09-04 12:40:32+00:00| seen|...
CVE-2026-85393
creationtimestamp| type| source ---|---|--- 2026-09-03 19:29:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/asgrlxcdrvwc5 2026-09-03 20:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3munahurifc23 2026-09-05 05:20:02+00:00| seen|...
Security Bulletin: MongoDB Enterprised Advanced affected by: Path Traversal (CVE-2026-49356)
Summary There are vulnerabilities in core-7.26.10.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-49356. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-49356 DESCRIPTION: Babel is a compiler for writing next generation JavaScript. Prior to 8.0.0-rc...
CVE-2026-84238
creationtimestamp| type| source ---|---|--- 2026-09-03 18:07:42+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mun25mnisg2o 2026-09-03 18:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mun4jepumj2w...
EmailXpose — Updated!
EmailXpose Specification AI-Powered Email Clarity HTML Mirror: https://roxanneardary.com/emailxpose-specification/ Specification Overview EmailXpose is an open source, modular AI email security and intelligence system designed to analyze email content, sender identity, links, attachments, images,...
SUSE CVE-2026-19475
An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...
CVE-2022-46032
creationtimestamp| type| source ---|---|--- 2026-09-03 14:43:22+00:00| seen| https://gist.github.com/1731249586/6656c4616664e3bf64e7083926dc0566...
CVE-2026-78080
creationtimestamp| type| source ---|---|--- 2026-09-03 13:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mumjjf4tjf2y 2026-09-03 14:07:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mummqctp742y...