27284 matches found
rapid-router (>=1.0.0.post0.dev406, <=1.0.0.post0.dev408) potentially affected by CVE-2026-48588 via django (1.8.3)
django PYPI version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - rapid-router =1.0.0.post0.dev406, =1.0.0.post0.dev408 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...
aimmo (>=0.69.11b455, <=1.3.1), cfl-common (>=4.30.11, <=5.26.4) +6 more potentially affected by CVE-2026-53877 via django (2.2.24)
django PYPI version 2.2.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.69.11b455, =4.30.11, =4.30.11, =0.1.1, =0.9.7, =3.11.0, =2.0.0, =2.7.7, =3.4.4 Source cves: CVE-2026-53877 Source advisory:...
aimmo (>=0.28.0b5241, <=0.61.8b52), cfl-common (>=3.1.4, <=4.14.2) +2 more potentially affected by CVE-2026-53878 via django (1.11.24)
django PYPI version 1.11.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.28.0b5241, =3.1.4, =2.19.0, =2.2.0, =2.4.12 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...
aimmo (>=0.69.9b442, <=0.69.10b450), cfl-common (>=4.30.9, <=4.30.10) +2 more potentially affected by CVE-2026-53878 via django (2.2.22)
django PYPI version 2.2.22 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.69.9b442, =4.30.9, =4.30.9, =4.30.10 - rapid-router 2.7.6 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...
rapid-router (>=1.0.0.post0.dev406, <=1.0.0.post0.dev408) potentially affected by CVE-2024-45231 via django (1.8.3)
django PYPI version 1.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - rapid-router =1.0.0.post0.dev406, =1.0.0.post0.dev408 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...
aimmo (>=0.28.0b5241, <=0.61.8b52), cfl-common (>=3.1.4, <=4.14.2) +2 more potentially affected by CVE-2024-45231 via django (1.11.24)
django PYPI version 1.11.24 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =0.28.0b5241, =3.1.4, =2.19.0, =2.2.0, =2.4.12 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...
rapid-router (>=1.0.0.post0.dev74, <=1.0.0.post0.dev405) potentially affected by CVE-2024-45231 via django (1.8.2)
django PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - rapid-router =1.0.0.post0.dev74, =1.0.0.post0.dev405 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...
ROOT-APP-NPM-CVE-2026-22030 CVE-2026-22030 in @rootio/react-router - Patched by Root
Root has patched CVE-2026-22030 in the @rootio/react-router package for Root:npm. Multiple fixed versions available...
MAL-2026-7254 Malicious code in dwagger-express-router (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in dwagger-express-router (npm)
--- -= Per source details. Do not edit below this line.=-...
Phoenix Contact TC Router 5004T-5G EU 1.06.18 Security Audit Tool
This script performs a security audit on Phoenix Contact TC Routers to detect indicators of exposure to CVE-2025-41717, without executing any commands or altering the device...
Cisco IOS XE Software Network Based Application Recognition DoS (cisco-sa-nbar-dos-LAvwTmeT)
According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. Please see the included Cisco BIDs and Cisco Security Advisory for more information. TRUSTED...
📄 Phoenix Contact TC Router 5004T-5G EU 1.06.18 Authenticated Command Injection
Proof of concept for an authenticated command injection vulnerability in certain Phoenix Contact TC Routers such as 5004T-5G EU with firmware versions 1.06.18 and below...
VulnCheck KEV: CVE-2026-59800
9Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticated POST /api/tunnel/tailscale-install endpoint this route is not covered by the dashboard middleware matcher, so no authorization check is applied. The sudoPassword field from the request body is written to t...
NPM: 9router: Login brute-force protection bypass via spoofed X-Forwarded-For header
NPM: 9router: Login brute-force protection bypass via spoofed X-Forwarded-For header vulnerability discovered by ? in WordPress Npm 9router versions = 0.4.71...
9router: Login brute-force protection bypass via spoofed X-Forwarded-For header
Summary The 9router dashboard login rate limiter derives the client identity from the attacker-controlled X-Forwarded-For HTTP header. When 9router is directly exposed, or deployed behind a reverse proxy that does not overwrite untrusted forwarding headers, a remote attacker can rotate the...
Incorrect Authorization
Overview 9router is a 9Router CLI - Start and manage 9Router server Affected versions of this package are vulnerable to Incorrect Authorization via the /api/settings/database endpoint, which allows exporting the entire database including plaintext API keys, OAuth tokens, and sensitive settings, a...
Missing Authorization
Overview 9router is a 9Router CLI - Start and manage 9Router server Affected versions of this package are vulnerable to Missing Authorization due to missing authentication checks on several API endpoints, including /api/providers, /api/usage/stats, /api/usage/request-logs, and...
MAL-2026-6873 Malicious code in router-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f60a60e68f645bffe7eb5e137979aa6fb6c535c53ee6e13a9fcf01951eb05b55 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...