CVE-2026-27748

creationtimestamp| type| source ---|---|--- 2026-03-03 15:37:09+00:00| seen| https://infosec.exchange/users/quarkslab/statuses/116165982849269143 2026-03-03 15:37:36+00:00| seen| https://bsky.app/profile/quarkslab.bsky.social/post/3mg63xocxwc2l 2026-03-05 18:01:35+00:00| seen|...

CVE-2026-1492

creationtimestamp| type| source ---|---|--- 2026-03-03 06:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116163715191061674 2026-03-03 06:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mg53ptextu2u 2026-03-03 07:26:16+00:00| seen|...

CVE-2025-58107

In Microsoft Exchange through 2019, Exchange ActiveSync EAS configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartext, including the user's name, e-mail address, device ID, bearer token, and base64-encoded password...

CVE-2025-70252

creationtimestamp| type| source ---|---|--- 2026-03-02 16:44:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116160585749772602...

CVE-2026-24110

creationtimestamp| type| source ---|---|--- 2026-03-02 16:04:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116160426592563947 2026-03-02 18:05:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3tren3dj2o...

CVE-2025-58107

In Microsoft Exchange through 2019, Exchange ActiveSync EAS configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartext, including the user's name, e-mail address, device ID, bearer token, and base64-encoded password...

CVE-2026-2999

creationtimestamp| type| source ---|---|--- 2026-03-02 05:49:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10741-daed4-2.html 2026-03-02 07:22:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg2ptxicnr2x 2026-03-02 07:23:14+00:00| seen|...

CVE-2026-28794

creationtimestamp| type| source ---|---|--- 2026-03-02 02:33:00+00:00| published-proof-of-concept| https://github.com/middleapi/orpc/security/advisories/GHSA-m272-9rp6-32mc 2026-03-06 06:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116180702140239593 2026-03-06 06:00:29+00:00...

CVE-2025-58107

In Microsoft Exchange through 2019, Exchange ActiveSync EAS configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartext, including the user's name, e-mail address, device ID, bearer token, and base64-encoded password...

CVE-2025-58107

In Microsoft Exchange through 2019, Exchange ActiveSync EAS configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartext, including the user's name, e-mail address, device ID, bearer token, and base64-encoded password...

CVE-2025-58107

CVE-2025-58107 affects on-premises Microsoft Exchange environments up to 2019, specifically Exchange ActiveSync (EAS) configurations. The issue is that EAS configs may transmit sensitive data from Samsung mobile devices in cleartext, including the user’s name, email address, device ID, bearer tok...

CVE-2025-58107

In Microsoft Exchange through 2019, Exchange ActiveSync EAS configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartext, including the user's name, e-mail address, device ID, bearer token, and base64-encoded password...

PT-2026-22591

Name of the Vulnerable Software and Affected Versions Microsoft Exchange versions prior to 2020 Description Exchange ActiveSync EAS configurations on on-premises servers may transmit sensitive data in cleartext from Samsung mobile devices. This data includes the user's name, email address, device...

EUVD-2025-208168

In Microsoft Exchange through 2019, Exchange ActiveSync EAS configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartext, including the user's name, e-mail address, device ID, bearer token, and base64-encoded password...

Microsoft Exchange 安全漏洞

Microsoft Exchange is an enterprise-level email server provided by the American company Microsoft. Microsoft Exchange 2019 and earlier versions have a security vulnerability. This vulnerability stems from the fact that the Exchange ActiveSync configuration on local servers may transmit sensitive...

CVE-2026-3399

creationtimestamp| type| source ---|---|--- 2026-03-01 06:45:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116152566505912744 2026-03-02 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116156991352747158 2026-03-02 01:30:32+00:00| seen|...

CVE-2026-3380

creationtimestamp| type| source ---|---|--- 2026-02-28 07:07:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116146990737576376 2026-03-01 04:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116152036747115760 2026-03-01 04:30:30+00:00| seen|...

FreeBSD : FreeBSD -- Jail chroot escape via fd exchange with a different jail (a88f5b2d-11e9-11f1-8148-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a88f5b2d-11e9-11f1-8148-bc241121aa0a advisory. If two sibling jails are restricted to separate filesystem trees, which is to say that neither of the t...

openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

A flaw was found in OpenSSL. When processing a specially crafted PKCS12 Personal Information Exchange Syntax Standard file, a remote attacker can exploit an out-of-bounds write vulnerability. This issue, occurring within the OPENSSLuni2utf8 function, leads to memory corruption by writing data...

CVE-2026-3202

A flaw was found in the NTS-KE dissector in Wireshark. This issue occurs when malformed packets are decoded from a pcap file or the network, causing a NULL pointer dereference, resulting in a denial of service. Mitigation If the NTS-KE protocol dissector is not being used, it can be disabled via...