CVE-2026-45812

creationtimestamp| type| source ---|---|--- 2026-07-24 13:12:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mrfgkps3ci24...

CVE-2026-50243

creationtimestamp| type| source ---|---|--- 2026-07-22 14:31:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrajyjtrrv2e...

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation

A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the...

CVE-2026-57709

creationtimestamp| type| source ---|---|--- 2026-07-16 08:16:26+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqsba2n3x2p...

CVE-2026-54684

creationtimestamp| type| source ---|---|--- 2026-07-14 23:58:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqnfxhbupl25 2026-07-27 09:01:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrmjv6zbsa27 2026-07-27 09:01:06+00:00| seen|...

DEBIAN-CVE-2026-47737

Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when setremoteaddress proxyprotocol: :v1 is enabled and persistent connections are used because Puma incorrectly re-parses PROXY protocol headers after each keep-alive...

CVE-2026-47737

Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when setremoteaddress proxyprotocol: :v1 is enabled and persistent connections are used because Puma incorrectly re-parses PROXY protocol headers after each keep-alive...

UBUNTU-CVE-2026-47737

Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when setremoteaddress proxyprotocol: :v1 is enabled and persistent connections are used because Puma incorrectly re-parses PROXY protocol headers after each keep-alive...

CVE-2026-47737 Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections

Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when setremoteaddress proxyprotocol: :v1 is enabled and persistent connections are used because Puma incorrectly re-parses PROXY protocol headers after each keep-alive...

CVE-2026-47737

Puma is a Ruby/Rack web server built for parallelism. From 5.5.0 until 7.2.1 and 8.0.2, Puma is vulnerable to source IP spoofing when setremoteaddress proxyprotocol: :v1 is enabled and persistent connections are used because Puma incorrectly re-parses PROXY protocol headers after each keep-alive...

kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite

A flaw was found in the Linux kernel's netfilter bridge ebtables SNAT Source Network Address Translation module. This vulnerability allows a local attacker on a system configured with specific bridge netfilter rules to improperly modify underlying memory pages during an ARP Address Resolution...

CVE-2026-15668

creationtimestamp| type| source ---|---|--- 2026-07-14 05:37:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlihy3cf62k 2026-07-19 20:06:12+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqzld5l5o42m 2026-07-19 20:06:17+00:00| seen|...

CVE-2026-59216

creationtimestamp| type| source ---|---|--- 2026-07-13 15:09:01+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjxwa6pxg2c 2026-07-16 08:01:21+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mqqrgb6tvx2g 2026-07-24 18:35:08+00:00| published-proof-of-concept|...

CVE-2026-15490

creationtimestamp| type| source ---|---|--- 2026-07-12 10:51:50+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqgz3ga6yk2e...

CVE-2026-12426

creationtimestamp| type| source ---|---|--- 2026-07-11 04:39:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqdtszsiqd2y 2026-07-13 23:52:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkv6zlqiq2c 2026-07-16 08:13:13+00:00| seen|...

CVE-2026-15130

creationtimestamp| type| source ---|---|--- 2026-07-09 01:14:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6hh52sej2x 2026-07-09 04:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116888137010586881 2026-07-09 04:30:29+00:00| seen|...

CVE-2026-54773

creationtimestamp| type| source ---|---|--- 2026-07-09 01:13:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq6he5cskz2g...

CVE-2026-56297

creationtimestamp| type| source ---|---|--- 2026-07-08 16:00:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq5iieesd42z 2026-07-10 19:16:10+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqcudgdoch2f 2026-07-18 01:37:07+00:00| seen|...

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation

A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the...

kernel: Linux kernel: netfilter: ebtables SNAT target writes to shared memory pages during ARP hardware address rewrite

A flaw was found in the Linux kernel's netfilter bridge ebtables SNAT Source Network Address Translation module. This vulnerability allows a local attacker on a system configured with specific bridge netfilter rules to improperly modify underlying memory pages during an ARP Address Resolution...