CVE-2026-111664

Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileged local processes to force updates by calling the POST /api/v1/updates/from-url endpoint registered with api.PermitAnyone. Attackers can supply an attacker-controlled index URL that bypasses versi...

CVE-2026-111664

Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileged local processes to force updates by calling the POST /api/v1/updates/from-url endpoint registered with api.PermitAnyone. Attackers can supply an attacker-controlled index URL that bypasses versi...

CVE-2026-111664 Safing Portmaster before 2.2.5 Unauthenticated Forced Downgrade via /api/v1/updates/from-url

Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileged local processes to force updates by calling the POST /api/v1/updates/from-url endpoint registered with api.PermitAnyone. Attackers can supply an attacker-controlled index URL that bypasses versi...

CVE-2026-111664

Safing Portmaster versions prior to 2.2.5 are vulnerable to a missing authorization issue. Unprivileged local processes can call the POST /api/v1/updates/from-url endpoint, which is registered with api.PermitAnyone. This allows an attacker to provide an attacker-controlled index URL to bypass ver...

EUVD-2026-102955

Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileged local processes to force updates by calling the POST /api/v1/updates/from-url endpoint registered with api.PermitAnyone. Attackers can supply an attacker-controlled index URL that bypasses versi...

CVE-2026-111664 Safing Portmaster before 2.2.5 Unauthenticated Forced Downgrade via /api/v1/updates/from-url

Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileged local processes to force updates by calling the POST /api/v1/updates/from-url endpoint registered with api.PermitAnyone. Attackers can supply an attacker-controlled index URL that bypasses versi...

CVE-2026-111664 Safing Portmaster before 2.2.5 Unauthenticated Forced Downgrade via /api/v1/updates/from-url

Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileged local processes to force updates by calling the POST /api/v1/updates/from-url endpoint registered with api.PermitAnyone. Attackers can supply an attacker-controlled index URL that bypasses versi...

CVE-2026-111664: Missing Authentication for Critical Function

Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileged local processes to force updates by calling the POST /api/v1/updates/from-url endpoint registered with api.PermitAnyone. Attackers can supply an attacker-controlled index URL that bypasses versi...

PT-2026-116063

🚨 CVE-2026-111664 Safing Portmaster before 2.2.5 contains a missing authorization vulnerability that allows unprivileged local processes to force updates by calling the POST /api/v1/updates/from-url endpoint registered with api.PermitAnyone. Attackers can supply an attacker-controlled index URL...

Safing Portmaster Authorization Issue Vulnerability

Versions of Safing Portmaster prior to 2.2.5 have a vulnerability related to authorization verification. This vulnerability arises from the lack of authorization checks; local processes with privileged access can force updates by calling the POST /api/v1/updates/from-url endpoint. Attackers can...

EUVD-1999-1131

Malware in sbrugna...

EUVD-1999-0218

Malware in sbrugna...

CVE-1999-0218

Livingston portmaster machines could be rebooted via a series of commands...

CVE-1999-1150

The CVE-1999-1150 entry concerns Livingston Portmaster routers running ComOS that use the same initial sequence number (ISN) for TCP connections. This reuse allows remote attackers to spoof TCP connections and hijack sessions, as described in the provided description. The vulnerability is rated C...

CVE-1999-1150

Livingston Portmaster routers running ComOS use the same initial sequence number ISN for TCP connections, which allows remote attackers to conduct spoofing and hijack TCP sessions...

CVE-1999-1150: Undefined Security Weakness

Livingston Portmaster routers running ComOS use the same initial sequence number ISN for TCP connections, which allows remote attackers to conduct spoofing and hijack TCP sessions...

CVE-1999-0218

The vulnerability CVE-1999-0218 affects Livingston portmaster (ComOS) devices. A remote denial-of-service exists where the portmaster can be crashed by overflowing its buffers through repeated input, with an attack sequence involving the bytes 0xFF 0xF3. The Nessus/portmaster plugin describes sen...

CVE-1999-0218

Livingston portmaster machines could be rebooted via a series of commands...

CVE-1999-0218: Undefined Security Weakness

Livingston portmaster machines could be rebooted via a series of commands...

Livingston PortMaster ComOS Malformed Packet Remote DoS

It was possible to crash the remote Livingston portmaster by overflowing its buffers by sending several times the two chars : 0xFF 0xF3 An attacker may use this flaw to prevent you to use your internet access. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10182;...