94 matches found
IBM Data Risk Manager - Authentication Bypass via SAML
IBM Data Risk Manager versions 2.0.1 through 2.0.6 are vulnerable to authentication bypass when configured with SAML authentication. A remote attacker can bypass security restrictions by sending a specially crafted HTTP request to the SAML idpSelection endpoint, allowing them to bypass the...
CVE-2025-4428
Scanner di vulnerabilità CVE-2025-4427 e CVE-2025-4428 Strumento avanzato di rilevamento per identificare sistemi vulnerabili alla catena di exploit CVE-2025-4427 e CVE-2025-4428. Questo scanner di sicurezza aiuta a identificare endpoint vulnerabili e dimostra l'exploit proof-of-concept...
watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428
CVE-2025-4427 और CVE-2025-4428 Ivanti EPMM श्रृंखला Ivanti EPMM Pre-Auth RCE Chain 1day पहचान आर्टिफैक्ट जनरेटर उपकरण पहचान क्रियान्वयन में root@kitploit: $ python3 watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428.py -H https://192.168.1.100 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ /...
Photon OS 5.0: Chromium PHSA-2023-5.0-91-0160
An update of the chromium package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
MINI-HGCQ-4427-9JMF
Bulletin has no description...
Security update for alloy
This update for alloy fixes the following issues Security issues: CVE-2026-4427: github.com/jackc/pgproto3/v2: improper validation of field length allows a malicious PostgreSQL server to crash a client application via a DataRow message bsc1259919. CVE-2026-25934: github.com/go-git/go-git/v5:...
MINI-582R-MXJ9-4427
Bulletin has no description...
RLSA-2026:22450 Important: osbuild-composer security update
A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: golang:...
Security update for alloy (important)
openSUSE security update: security update for alloy ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20752-1 Rating: important References: bsc1258099 bsc1258609 bsc1259919 bsc1260317 Cross-References: CVE-2026-25934 CVE-2026-26958 CVE-2026-33186...
CVE-2026-4427 vulnerabilities
Vulnerabilities for packages: flyte, steampipe, telegraf, teleport, harbor, trillian, migrate, grafana-alloy, bento, splunk-otel-collector, src, kots, hydra...
CVE-2026-4427 vulnerabilities
Vulnerabilities for packages: bento, trillian, flyte, gotrue, telegraf, wavefront-collector-for-kubernetes, splunk-otel-collector, harbor, grafana-alloy, vault-fips, src, vault, hydra-fips, gotrue-fips, splunk-otel-collector-fips, teleport, steampipe, harbor-fips, ory-kratos, hydra, kots,...
CVE-2026-4427
creationtimestamp| type| source ---|---|--- 2026-03-19 18:28:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhgmxyb6p62x 2026-03-19 20:00:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhgs4jtldi2t 2026-03-19 20:19:01+00:00| seen|...
CGA-2JPM-8439-4427
Bulletin has no description...
CVE-2016-4427
In zulip before 1.3.12, deactivated users could access messages if SSO was enabled...
Ivanti Endpoint Manager Mobile exploit chain exploited in the wild
On May 13, 2025, Ivanti disclosed an exploited in the wild exploit chain, comprising of two new vulnerabilities affecting Ivanti Endpoint Manager Mobile EPMM: CVE-2025-4427 and CVE-2025-4428. Ivanti EPMM is an enterprise-focused software suite for IT teams to manage mobile devices, applications,...
Ivanti EPMM Pre-Auth RCE Chain 1day Detection Artifact Generator Tool
This script attempts to detect if Ivanti EPMM is vulnerable to CVE-2025-4427 and CVE-2025-4428. It affects versions 11.12.0.4 and prior, 12.3.0.1 and prior, 12.4.0.1 and prior, and 12.5.0.0 and prior...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Ivanti Endpoint_Manager_Mobile
CVE-2025-4427 and CVE-2025-4428 Ivanti EPMM Chain Ivanti EPMM...
RHSA-2025:4427
creationtimestamp| type| source ---|---|--- 2025-05-15 01:32:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16436...
CVE-2025-4427
creationtimestamp| type| source ---|---|--- 2025-05-13 16:30:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16170 2025-05-13 16:31:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2vi4o3jrz2 2025-05-13 16:47:59+00:00| seen|...
