GHSA-47HV-J4PX-H3C9 Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins

Security Vulnerability Report: Wails v2 — Origin Validator Bypass via Wildcard Pattern | | | |---|---| | Product | wailsapp/wails v2 | | Affected File | v2/internal/frontend/originvalidator/originValidator.go | | Affected Versions | All versions containing originValidator latest as of 2026-03-26 ...

Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins

Security Vulnerability Report: Wails v2 — Origin Validator Bypass via Wildcard Pattern | | | |---|---| | Product | wailsapp/wails v2 | | Affected File | v2/internal/frontend/originvalidator/originValidator.go | | Affected Versions | All versions containing originValidator latest as of 2026-03-26 ...

PT-2026-127188

Name of the Vulnerable Software and Affected Versions Wails versions 2.0.0 through 2.13.0 Description An issue exists in the origin validation mechanism where the wildcardPatternToRegex function in v2/internal/frontend/originvalidator/originValidator.go incorrectly expands asterisk characters int...

MINI-PCCC-G59X-625V

Bulletin has no description...

MiracleLinux 7 : freerdp-2.1.1-2.el7 (AXSA:2020-625:05)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-625:05 advisory. freerdp: Out of bound read in cliprdrserverreceivecapabilities CVE-2020-11018 freerdp: Out of bound read/write in usb redirection channel...

CVE-2025-67015

Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 allows attackers to change the Administrator password and escalate privileges via sending a crafted POST request to /Forms/adminaccess1...

CVE-2025-67015: Improper Access Control

Incorrect access control in Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 allows attackers to change the Administrator password and escalate privileges via sending a crafted POST request to /Forms/adminaccess1...

PT-2025-53595

Name of the Vulnerable Software and Affected Versions Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem version 2.5.1 Description A flaw in access control within the Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem firmware allows attackers to modify the Administrator passwor...

CVE-2025-67015

The Comtech EF Data CDM-625 / CDM-625A Advanced Satellite Modem with firmware v2.5.1 is vulnerable to an incorrect access control flaw. An attacker can send a crafted POST request to the /Forms/admin_access_1 endpoint to change the Administrator password and escalate privileges . Proof-of-concept...

EUVD-2018-5844

Malware in sbrugna...

EUVD-2017-9292

Malware in sbrugna...

EUVD-2019-11935

Malware in sbrugna...

EUVD-2017-9308

Malware in sbrugna...

EUVD-2017-9410

Malware in sbrugna...

EUVD-2019-11889

Malware in sbrugna...

EUVD-2017-7263

Malware in sbrugna...

EUVD-2018-17679

Malware in sbrugna...

GitHub Security Lab: [Java]: CWE-625 - Query to detect regex dot bypass

This bug was reported directly to GitHub Security Lab...

Check Point Response to CVE-2021-36299, CVE-2021-36300, CVE-2021-36301, CVE-2021-20235 - Dell iDRAC9 Vulnerabilities

Cause CVE-2021-36299 - An SQL injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to the affected application. CVE-2021-36300 -...

CVE-2019-2332

Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607,...