CVE-2026-109364

Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses. Attackers can reconnect from fresh IPv6 addresses in their /64 allocation or flush the 20,000-entry FIFO ban list t...

CVE-2026-109364 Zebra 2.3.0 before 6.4.0 Peer Ban Bypass via Exact-IP Keying

Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses. Attackers can reconnect from fresh IPv6 addresses in their /64 allocation or flush the 20,000-entry FIFO ban list t...

CVE-2026-109364

Zebra version 2.3.0 before 6.4.0 is vulnerable to a protection mechanism failure (CWE-693) that allows unauthenticated peers to bypass IP-based bans. The root cause is that bans and misbehavior scores are keyed on exact IP addresses rather than wider network prefixes. Attackers can evade these re...

EUVD-2026-97666

Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses. Attackers can reconnect from fresh IPv6 addresses in their /64 allocation or flush the 20,000-entry FIFO ban list t...

PT-2026-110781

Name of the Vulnerable Software and Affected Versions Zebra versions 2.3.0 through 6.3.x Description A protection mechanism failure allows unauthenticated peers to evade bans. This occurs because bans and misbehavior scores are keyed on exact IP addresses. Attackers can bypass these restrictions ...

CVE-2026-109364: Protection Mechanism Failure

Zebra 2.3.0 before 6.4.0 contains a protection mechanism failure that allows unauthenticated peers to evade bans because bans and misbehavior scores are keyed on exact IP addresses. Attackers can reconnect from fresh IPv6 addresses in their /64 allocation or flush the 20,000-entry FIFO ban list t...

CVE-2026-10552

The Blue Captcha plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to and including 2.0.1. This is due to missing or incorrect nonce validation on the main admin panel blcapmainpage and on the Hall of Shame and Log subpages, which accept a 'blcapaction' / 'action'...

EUVD-2018-6613

Malware in sbrugna...

CVE-2022-25215

Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add or remove client MAC addresses to or from a list of banned hosts. Clients with those MAC addresses are then prevented from accessing either the WAN or the router itself...

CVE-2022-25215

Improper access control on the LocalMACConfig.asp interface allows an unauthenticated remote attacker to add or remove client MAC addresses to or from a list of banned hosts. Clients with those MAC addresses are then prevented from accessing either the WAN or the router itself...

CVE-2018-14724

In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the ban reason, which is executed on the bans.php page...

CVE-2018-14724

In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the ban reason, which is executed on the bans.php page...

Cross site scripting

In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the ban reason, which is executed on the bans.php page...

CVE-2018-14724

In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the ban reason, which is executed on the bans.php page...

CVE-2018-14724

CVE-2018-14724 – MyBB Ban List 1.0 (Ban List plugin) :Vulnerability exists in the Ban List plugin for MyBB where any forum user with moderator privileges can ban others and inject an XSS payload into the ban reason, which is executed on bans.php. Public materials confirm the affected component (B...

PT-2019-9050

Name of the Vulnerable Software and Affected Versions Ban List plugin version 1.0 for MyBB Description The issue allows any forum user with mod privileges to input an XSS payload into the ban reason. This payload is then executed on the bans.php page, potentially leading to malicious script...

CVE-2018-14724: Improper Neutralization of Input During Web Page Generation

In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the ban reason, which is executed on the bans.php page...