CVE-2026-66279

In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality...

CVE-2026-66279

The Connect SDK (version 4.3.1 and earlier) and Flex SDK (version 3.7.7 and earlier) are vulnerable to a security flaw in the Connect Stack . An attacker can send a message with invalid security settings to bypass authentication, which may lead to network disruption . The vulnerability is associa...

CVE-2026-66279 Dis-connect vulnerability in Connect Stack

In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality...

EUVD-2026-108179

In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass authentication resulting in network disruption. This vulnerability does not allow an attacker to gain the Network Key or otherwise break confidentiality...

CVE-2025-59430

Mesh Connect JS SDK contains JS libraries for integrating with Mesh Connect. Prior to version 3.3.2, the lack of sanitization of URLs protocols in the createLink.openLink function enables the execution of arbitrary JavaScript code within the context of the parent page. This is technically...

GHSA-VH3F-QPPR-J97F Mesh Connect JS SDK Vulnerable to Cross Site Scripting via createLink.openLink

Summary The lack of sanitization of URLs protocols in the createLink.openLink function enables the execution of arbitrary JavaScript code within the context of the parent page. Details...

Security Bulletin: Denial of service vulnerability affecting Aspera Connect 3.7 or 3.8

Summary A vulnerability, if exploited, could disable or impair the use of certain versions of Aspera Connect. UPDATE 12/9/2019: The certificate for local.connectme.us has been revoked, as a result, Aspera Connect 3.7 and 3.8 no longer function on Firefox and Safari. The web application integrated...

Security Bulletin: Insecure Direct Object Reference Vulnerability Affecting IBM Aspera Connect

Summary When a weak appid is used with the IBM Connect SDK, an attacker can retrieve sensitive transfer details. Vulnerability Details The confidentiality of transfer information is protected by the web application’s appid. If an attacker discovers the appid, they can use the Connect API to...

Macrovision InstallShield升级服务ActiveX控件不安全方式漏洞

BUGTRAQ ID: 26280 CVECAN ID: CVE-2007-5660 MacroVision InstallShield是很多软件厂商都在使用的安装程序解决方案。 Macrovision InstallShield所安装的升级服务（Update Service）可选组件中存在多个不安全的方式，远程攻击者可能利用此漏洞通过诱使用户访问恶意网页控制用户系统。 该组件以以下ActiveX控件的形式实现： CLSID：E9880553-B8A7-4960-A668-95C68BED571E 文件：C:\Windows\Downloaded Files\isusweb.dll...