CVE-2020-16898-EXP-POC

CVE-2020-16898 CVE-2020-16898 Windows TCP/IP Remote Code Execution Vulnerability EXP&POC Reproduction forforever: https://www.cnblogs.com/forforever/p/13846077.html PoC CVE-2020-16898Checker-poc Command: Run PowerShell/CMD as Administrator Powershell.exe -ExecutionPolicy UnRestricted -File...

CVE-2021-34767

CVE-2021-34767 Description Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an...

Linux Distros Unpatched Vulnerability : CVE-2026-109378

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.18 contains a server-side request forgery vulnerability in recupererurl in ecrire/inc/distant.php that follows up to 10 redirects without...

CVE-2026-111216 Netgate pfSense CE through 2.9.0 OS Command Injection via Gateway Monitor IP

Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with gateway edit privileges to execute commands as root by injecting shell metacharacters into an IPv6 link-local zone index. Attackers can set a gateway Monitor IP whose unvalidated...

CVE-2026-111216

Netgate pfSense CE through version 2.9.0 is vulnerable to an OS command injection vulnerability. Authenticated users with gateway edit privileges can execute commands as root by injecting shell metacharacters into an IPv6 link-local zone index. The root cause is that the start_dpinger() function ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Bluetooth: 6lowpan: resetting the link-local header in the IPv6 receive path The Bluetooth 6lowpan.c netdev module has the headerops function; therefore, it must set the link-local header for the RX skb packet. Otherwise, thin...

CVE-2026-111216: Improper Neutralization of Special Elements used in an OS Command

Netgate pfSense CE through 2.9.0 contains an OS command injection vulnerability that allows authenticated users with gateway edit privileges to execute commands as root by injecting shell metacharacters into an IPv6 link-local zone index. Attackers can set a gateway Monitor IP whose unvalidated...

PT-2026-110927

Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.4.18 Description Authenticated attackers can perform a server-side request forgery SSRF by providing a remote URL, such as a remote document or a syndicated site feed. The issue exists in the recuperer url function...

CVE-2026-96400

With migrations ALLOWEDDOMAINS set to a matching entry such as or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, such as 169.254.169.254, even when ALLOWLOCALNETWORKS = false. The local-network block list did not cover these ranges, and a...

CVE-2026-96400 Gitea migration SSRF to reserved addresses through ALLOWED_DOMAINS

With migrations ALLOWEDDOMAINS set to a matching entry such as or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, such as 169.254.169.254, even when ALLOWLOCALNETWORKS = false. The local-network block list did not cover these ranges, and a...

EUVD-2026-93922

With migrations ALLOWEDDOMAINS set to a matching entry such as or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, such as 169.254.169.254, even when ALLOWLOCALNETWORKS = false. The local-network block list did not cover these ranges, and a...

CVE-2026-96400

With "migrations ALLOWEDDOMAINS" set to a matching entry such as "" or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, such as "169.254.169.254", even when "ALLOWLOCALNETWORKS = false". The local-network block list did not cover these ranges,...

Cisco ASA Uncontrolled Resource Consumption (CVE-2020-3528)

A vulnerability in the OSPF Version 2 OSPFv2 implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. The...

PT-2026-107224

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description URL validation during migrations may allow access to reserved and link-local addresses, such as 169.254.169.254, when the migrations ALLOWED DOMAINS configuration is set to a wildcard or a...

CVE-2026-96400: Server-Side Request Forgery (SSRF)

With migrations ALLOWEDDOMAINS set to a matching entry such as or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, such as 169.254.169.254, even when ALLOWLOCALNETWORKS = false. The local-network block list did not cover these ranges, and a...

[SECURITY] Fedora 45 Update: telepathy-salut-0.8.1-37.fc45

telepathy-salut is a Telepathy connection manager for link-local XMPP. Normally, XMPP does not support direct client-to-client interactions, since it requires authentication with a server. This package makes it is possible to establish an XMPP-like communications system on a local network using...

Critical: amazon-ssm-agent

Issue Overview: Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. CVE-2026-42505 go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2...

Critical: amazon-ssm-agent

Issue Overview: Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. CVE-2026-42505 go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2...

ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts

Summary Address6.isLinkLocal recognizes fe80::/64 rather than fe80::/10. Link-local unicast is the whole /10 under RFC 4291 §2.4 and the IANA IPv6 Special-Purpose Address Registry, so the method returns false for every link-local address outside the one /64 that stateless address autoconfiguratio...

Incorrect Behavior Order

Overview ip-address is an A library for parsing IPv4 and IPv6 IP addresses in node and the browser. Affected versions of this package are vulnerable to Incorrect Behavior Order via the isLinkLocal method, which incorrectly compared only the first 64 bits of an IPv6 address against the fixed patte...