Lucene search
+L

60 matches found

Mend
Mend
•added 2026/10/12 3:57 p.m.•9 views

CVE-2026-102531

Impact Local authenticated users that are conspiring with, or tricked by, a malicious federated homeserver can cause room aliases to have their destination room changed. Homeservers that do not federate or only participate in a closed, trusted federation are not affected. Homeservers that only ha...

7.1CVSS5.8AI score
SaveExploits0References3
NVD
NVD
•added 2026/07/27 4:17 p.m.•25 views

CVE-2026-55953

The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tlshandshake:hello/5 handler validates the negotiated protocol version and the downgrade...

9.1CVSS0.00234EPSS
SaveExploits0References7
RedhatCVE
RedhatCVE
•added 2026/02/20 1:22 a.m.•21 views

CVE-2025-12811

Improper Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' in Delinea Inc. Cloud Suite and Privileged Access Service. If you're not using the latest Server Suite agents, this fix requires that you upgrade to Server Suite 2023.1 agent 6.0.1 or later. If you cannot upgrade to...

6.9CVSS5.5AI score0.0037EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/18 11:16 p.m.•27 views

CVE-2025-12811

Improper Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' in Delinea Inc. Cloud Suite and Privileged Access Service. If you're not using the latest Server Suite agents, this fix requires that you upgrade to Server Suite 2023.1 agent 6.0.1 or later. If you cannot upgrade to...

6.9CVSS0.0037EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/02/18 10:08 p.m.•53 views

CVE-2025-12811 Cloud Suite and Privilege Access Service– HTTP request smuggling vulnerability

Improper Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' in Delinea Inc. Cloud Suite and Privileged Access Service. If you're not using the latest Server Suite agents, this fix requires that you upgrade to Server Suite 2023.1 agent 6.0.1 or later. If you cannot upgrade to...

6.9CVSS0.0037EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/18 10:08 p.m.•13 views

CVE-2025-12811 Cloud Suite and Privilege Access Service– HTTP request smuggling vulnerability

Improper Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' in Delinea Inc. Cloud Suite and Privileged Access Service. If you're not using the latest Server Suite agents, this fix requires that you upgrade to Server Suite 2023.1 agent 6.0.1 or later. If you cannot upgrade to...

6.9CVSS5.9AI score0.0037EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/18 10:08 p.m.•36 views

CVE-2025-12811

CVE-2025-12811 affects Delinea Cloud Suite and Privileged Access Service with an HTTP Request Smuggling flaw (Improper Inconsistent Interpretation of HTTP Requests). The CVSS v4.0 base score is 6.9 (Medium) with network attack vector, low attack complexity, no privileges, and no user interaction ...

6.9CVSS5.9AI score0.0037EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/02/18 12:00 a.m.•45 views

PT-2026-20542

Name of the Vulnerable Software and Affected Versions Delinea Cloud Suite and Privileged Access Service versions prior to 2023.1 agent 6.0.1 Delinea Server Suite versions 2022.1.10 agent version 5.9.1-337 and 2023.0.5 agent version 6.0.0-158 Description The software suffers from an Improper...

6.9CVSS5.8AI score0.0037EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/18 12:00 a.m.•8 views

CVE-2025-12811: Inconsistent Interpretation of HTTP Requests

Improper Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' in Delinea Inc. Cloud Suite and Privileged Access Service. If you're not using the latest Server Suite agents, this fix requires that you upgrade to Server Suite 2023.1 agent 6.0.1 or later. If you cannot upgrade to...

6.9CVSS5.9AI score0.0037EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/02/13 7:18 p.m.•19 views

CVE-2026-24044

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...

9.2CVSS6.2AI score0.00322EPSS
SaveExploits0References1
osv_alpine
osv_alpine
•added 2026/02/12 8:16 p.m.•5 views

ALPINE-CVE-2026-24044

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...

9.2CVSS0.00322EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/12 8:16 p.m.•32 views

CVE-2026-24044

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...

9.2CVSS0.00322EPSS
SaveExploits0References3
Mend
Mend
•added 2026/02/12 7:06 p.m.•13 views

CVE-2026-24044

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...

9.2CVSS6.1AI score0.00322EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
•added 2026/02/12 7:06 p.m.•35 views

CVE-2026-24044

Element Server Suite Community Edition ESS Community deploys a Matrix stack using the provided Helm charts and Kubernetes distribution. The ESS Community Helm Chart secrets initialization hook using matrix-tools container before 0.5.7 is using an insecure Matrix server key generation method,...

9.2CVSS6.1AI score0.00322EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/02/12 12:00 a.m.•31 views

Element Server Suite security vulnerabilities

Element Server Suite is a community edition of the Element open-source server suite. There are security vulnerabilities in Element Server Suite Community Edition ESS Community, which stem from an insecure method for generating Matrix server keys. This could allow network attackers to recreate the...

9.2CVSS6AI score0.00322EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2014-7169

Malware in sbrugna...

4.9CVSS5.8AI score0.00373EPSS
SaveExploits0References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2002-2212

Malware in sbrugna...

8.3CVSS6.4AI score0.01571EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•26 views

EUVD-2012-0941

Malware in sbrugna...

10CVSS5.8AI score0.04119EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/05/21 10:41 p.m.•20 views

CVE-2002-2232

Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD CWD command...

8.5CVSS8.3AI score0.04604EPSS
SaveExploits2References1
Prion
Prion
•added 2023/06/07 6:15 p.m.•27 views

Code injection

mailcow is a mail server suite based on Dovecot, Postfix and other open source software, that provides a modern web UI for user/server administration. A vulnerability has been discovered in mailcow which allows an attacker to manipulate internal Dovecot variables by using specially crafted...

6.5CVSS8.4AI score0.00979EPSS
SaveExploits0References3
Rows per page
Query Builder