CVE-2026-73785

HPE IceWall Federation Agent 4.0 and IceWall Federation Proxy 4.0 contain a denial-of-service vulnerability that can be triggered by a remote, unauthenticated attacker over the network with low complexity (CVSS 3.1: 7.5 HIGH ). Affected platforms include RHEL 7/8/9/10 and Windows. The impact is l...

CVE-2026-73785 HPE IceWall Federation Agent and Proxy, Denial of Service vulnerability

A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service DoS...

Linux Distros Unpatched Vulnerability : CVE-2026-88018

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve s3 configured with...

CVE-2026-90452: Improper Certificate Validation

Requests from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange do not verify the identity provider's server certificate. An attacker positioned on the network path between the proxy and the identity provider could impersonate the...

CVE-2026-90449: Missing Authentication for Critical Function

When a particular authentication mode is configured, the reverse proxy forwards requests for a bundled third-party administrative interface directly to that interface without applying the gateway's own authentication requirement first. All access control for this administrative interface, which...

Fedora 43 : curl (2026-6841033933)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-6841033933 advisory. - fix HTTP/2 stream-dependency tree UAF CVE-2026-10536 - fix stale proxy password leak CVE-2026-9079 - fix wrong reuse for different services...

Fedora 44 : curl (2026-f26b509a1a)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f26b509a1a advisory. - Fix HTTP/2 stream-dependency tree UAF CVE-2026-10536 - Fix Native CA trust persist CVE-2026-11564 - Fix stale proxy password leak CVE-2026-9079 -...

PT-2026-90518

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description When a specific authentication mode is configured, the reverse proxy forwards requests for a bundled third-party administrative interface directly to that...

PT-2026-96570

In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssp lock before publishing proc entry create use gss proxy proc entry publishes /proc/net/rpc/use-gss-proxy via proc create data before init gssp clnt runs mutex init on sn-gssp lock. Once the dentry is linked under...

CVE-2026-89540: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sunrpc: init gssplock before publishing proc entry createusegssproxyprocentry publishes /proc/net/rpc/use-gss-proxy via proccreatedata before initgsspclnt runs mutexinit on sn-gssplock. Once the dentry is linked under...

PT-2026-90256

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the sunrpc component where the function create use gss proxy proc entry publishes the /proc/net/rpc/use-gss-proxy endpoint before the init gssp clnt function...

PT-2026-90521

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Requests sent from the reverse proxy to the identity-provider service for token discovery, introspection, and credential exchange fail to verify the server...

PT-2026-90516

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A deployment mode designed to provide read-only access to stored data fails to restrict request methods on certain application programming interface routes. This...

PT-2026-89792

🚨 HIGH SEVERITY: CVE-2026-73785 CVSS 7.5 HPE IceWall Federation Agent & Proxy vulnerable to remote unauthenticated DoS attack. No user interaction required. Patch immediately. CVE Vulnerability PatchNow ThreatIntel https://t.co/7OEcwyYjWK...

CVE-2026-73785: Improper Handling of Unexpected Data Type

A potential security vulnerability in HPE IceWall Federation Agent and Proxy could allow a remote unauthenticated attacker to cause a denial of service DoS...

PT-2026-90523

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An improper access control issue exists in a deployment mode designed to provide read-only access to a bundled packet-analysis component's interface. The system...

Linux Distros Unpatched Vulnerability : CVE-2026-88017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.64.0 until 1.75.1, the FTP auth-proxy drive...

Fedora 45 : nsd (2026-c56ac69334)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c56ac69334 advisory. BUG FIXES: Fix for CVE-2026-18664: IP range access control restrictions are bypassed for some unintended IP. Thanks to Qifan Zhang, Palo Alto Networ...

OMG_KILLER

OMGKILLER Автоатакующий скрипт на базе эксплойтов CVE-2024-37890 и OOM 2026 Пока лайтовый вариант щас расширим проксями и прочим дерьмом что бы атаковать с одной тачки как огромная ботферма...

axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization

A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NOPROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the...