8929 matches found
MiracleLinux 9 : nginx:1.26 (AXSA:2026-457:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-457:01 advisory. nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files CVE-2026-32647 NGINX: NGINX: Denial of Service or file modification...
CVE-2026-40340
creationtimestamp| type| source ---|---|--- 2026-04-18 01:31:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjqc5bweaq2q...
GHSA-8R5M-3F66-QPR3 HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS
Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0,...
CVE-2026-5052
Vault’s PKI engine’s ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges. This may lead to these requests being sent to local network targets, potentially leading to information disclosure. Fixed in Vault Community Edition 2.0.0 and Vault Enterprise 2.0.0,...
CVE-2026-5052
Vault’s PKI engine ACME validation did not reject local targets when issuing http-01 and tls-alpn-01 challenges, creating potential SSRF and information disclosure against internal targets. The issue affects Vault Community Edition up to 2.0.0 and Vault Enterprise up to 2.0.0, as well as 1.21.5, ...
CVE-2026-31049
An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV registration field...
CVE-2026-34238
creationtimestamp| type| source ---|---|--- 2026-04-14 01:24:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjg7unxtcr23 2026-05-01 15:50:35+00:00| seen| https://vulnerability.circl.lu/bundle/63ae1405-3878-4622-935b-6ee96a75dc90...
CVE-2026-5989
creationtimestamp| type| source ---|---|--- 2026-04-10 01:06:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj44ymxfzy2i 2026-04-10 01:19:02+00:00| seen| Telegram/r2aLRB54IhOSR-P7tVQ1PquPIQ5c0jGeGUejuuUUcNPCN8 2026-04-30 23:37:14+00:00| seen|...
CVE-2026-33439
creationtimestamp| type| source ---|---|--- 2026-04-07 23:20:49+00:00| published-proof-of-concept| Telegram/UCQVBQ1wk3sWuk0eQ1N0bHldnYCTUsbgi6Jx-voi5Wevn8w 2026-04-07 23:21:06+00:00| seen| Telegram/WwaVaWmCpWfeYuJ8P8IqcUlHCUAeEgjmrCmKGvAa3A2q2J0 2026-04-08 01:22:01+00:00| seen|...
CVE-2021-4473
Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary commands by supplying a crafted objClass parameter containing shell metacharacters and output redirection. Attackers...
CVE-2025-14815
creationtimestamp| type| source ---|---|--- 2026-04-07 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-097-01 2026-04-08 14:17:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miyibxuugd27 2026-04-08 15:16:22+00:00| seen|...
CVE-2026-39363
creationtimestamp| type| source ---|---|--- 2026-04-06 12:11:59+00:00| published-proof-of-concept| https://github.com/vitejs/vite/security/advisories/GHSA-p9ff-h696-f583 2026-04-07 21:22:19+00:00| seen| Telegram/ORzlugWNJSN1mBT3L8tDKZ1H7oYKkiEmKL9E7e5xnpgHaiU 2026-04-07 22:49:01+00:00| seen|...
`logtrace` was removed from crates.io for malicious code
logtrace appeared to be downloading a RAT. The malicious crate had 2 versions published on 2026-04-01 that had a total of 30 downloads. There were no crates depending on this crate on crates.io. Thanks to Socket.dev for detecting and reporting this to the crates.io team!...
Tenda 4G03 安全漏洞
The Tenda 4G03 is a wireless router produced by the Chinese company Tenda. The Tenda 4G03 Pro 1.0 version, 1.0re version, 01.bin version, and 04.03.01.53 version have security vulnerabilities, which stem from the use of hardcoded encryption keys...
GHSA-98F9-FQG5-HVQ5
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:49+00:00| seen| Telegram/Wq2MikHHjaMT3QcZYic1EqOjYlzbZBeR3fuLUZ6lQSb49CA...
GHSA-3JR7-6HQP-X679
creationtimestamp| type| source ---|---|--- 2026-04-04 01:18:11+00:00| seen| Telegram/NqFWwBgJewLI29Tb0q1DIosuMN7rhj0bJY4LtsK35hxc...
GHSA-X7WH-G25G-53VG
creationtimestamp| type| source ---|---|--- 2026-04-01 23:28:03+00:00| seen| Telegram/9GieXm2mvI1hTc72mHyuKx2RXs9Lk1GMse1mK9qILNsF30...
GHSA-R4V5-RWR2-Q7R4
creationtimestamp| type| source ---|---|--- 2026-04-01 23:27:43+00:00| seen| Telegram/9bl7FEfQKeFpZFPlYLUaNlRChLBL7dB3Syrn3BTLiX1da84...