15 matches found
CVE-2025-32462-Exploit
CVE-2025-32462-Exploit: ŠŠ¾Š±ŠµŠ³ Matrix-Sudo ŠŠ¾Š“Š¼ŠµŠ½Š° ŠøŠ¼ŠµŠ½Šø Ń Š¾ŃŃŠ° Šø ŠæŠ¾Š²ŃŃŠµŠ½ŠøŠµ ŠæŃŠøŠ²ŠøŠ»ŠµŠ³ŠøŠ¹ CVE-2025-32462 "Š¢Ń ŠæŃŠøŠ½ŠøŠ¼Š°ŠµŃŃ ŃŠøŠ½ŃŃ ŃŠ°Š±Š»ŠµŃŠŗŃ... ŠøŃŃŠ¾ŃŠøŃ Š·Š°ŠŗŠ°Š½ŃŠøŠ²Š°ŠµŃŃŃ. Š¢Ń ŠæŃŠøŠ½ŠøŠ¼Š°ŠµŃŃ ŠŗŃŠ°ŃŠ½ŃŃ ŃŠ°Š±Š»ŠµŃŠŗŃ... ŃŃ ŠæŠ¾Š»ŃŃŠ°ŠµŃŃ root." ŠŠæŠøŃŠ°Š½ŠøŠµ ŠŃŠ¾Ń ŃŠŗŃŠæŠ»Š¾Š¹Ń Š“ŠµŠ¼Š¾Š½ŃŃŃŠøŃŃŠµŃ ŃŃŠ·Š²ŠøŠ¼Š¾ŃŃŃ ŠæŠ¾Š²ŃŃŠµŠ½ŠøŃ ŠæŃŠøŠ²ŠøŠ»ŠµŠ³ŠøŠ¹ Š² sudo...
Ubuntu 18.04 LTS / 20.04 LTS : Go Networking vulnerability (USN-8416-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8416-1 advisory. It was discovered that Go Networking incorrectly handled certain Punycode-encoded labels in the idna package. An attacker could possibly use this issu...
USN-8416-1: Go Networking vulnerability
It was discovered that Go Networking incorrectly handled certain Punycode-encoded labels in the idna package. An attacker could possibly use this issue to bypass hostname-based access restrictions...
CVE-2025-48840
An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote unauthenticated attacker to bypass hostname restrictions via a specially crafted request...
EUVD-2025-208485
An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote unauthenticated attacker to bypass hostname restrictions via a specially crafted request...
EUVD-2025-208486
An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote unauthenticated attacker to bypass hostname restrictions via a specially crafted request...
CVE-2025-48840
An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote unauthenticated attacker to bypass hostname restrictions via a specially crafted request...
CVE-2025-48840
An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote unauthenticated attacker to bypass hostname restrictions via a specially crafted request...
CVE-2025-48840
CVE-2025-48840 affects Fortinet FortiWeb: an authentication bypass by spoofing via hostname restrictions. Vulnerable are FortiWeb versions 7.6.0ā7.6.3, 7.4.0ā7.4.8, and all 7.2 and all 7.0 versions. The issue allows a remote unauthenticated attacker to bypass hostname restrictions through a craft...
CVE-2025-48840
An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote unauthenticated attacker to bypass hostname restrictions via a specially crafted request...
PT-2026-24230
šØ CVE-2025-48840 An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote unauthenticated attacker to bypass hostname restrictions via a specially crafted...
Exploit for Incorrect Authorization in Sudo_Project Sudo
CVE-2025-32462 ā Sudo Hostname Bypass Privilege Escalation !...
CVE-2019-18677
An issue was discovered in Squid 3.x and 4.x through 4.8 when the appenddomain setting is used because the appended characters do not properly interact with hostname length restrictions. Due to incorrect message processing, it can inappropriately redirect traffic to origins it should not be...
[Backports-security-announce] Security Update for proftpd-dfsg
Francesco P. Lovergine uploaded new packages for proftpd-dfsg which fixed the following security problem: CVE-2009-3639 The modtls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a \0 character in a domain name i...
CVE-2002-0511
The default configuration of Name Service Cache Daemon nscd in Caldera OpenLinux 3.1 and 3.1.1 uses cached PTR records instead of consulting the authoritative DNS server for the A record, which could make it easier for remote attackers to bypass applications that restrict access based on host nam...