460 matches found
CVE-2026-27198
creationtimestamp| type| source ---|---|--- 2026-02-21 06:18:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdy33ul632n 2026-03-04 09:40:11+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mg7yhlduxd2m...
CVE-2025-70795
creationtimestamp| type| source ---|---|--- 2026-02-19 21:03:01+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mfaikm7zls2b 2026-04-17 18:23:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjpk7giz6y2f...
CVE-2019-25386 Smoothwall Express 3.1 'dmzholes.cgi' Cross-Site Scripting
Smoothwall Express 3.1-SP4-polar-x8664-update9 contains multiple reflected cross-site scripting vulnerabilities in the dmzholes.cgi script that allow attackers to inject malicious scripts through unvalidated parameters. Attackers can submit POST requests with script payloads in the SRCIP, DESTIP,...
PT-2026-8369
Smoothwall Express 3.1-SP4-polar-x86 64-update9 contains multiple reflected cross-site scripting vulnerabilities in the dmzholes.cgi script that allow attackers to inject malicious scripts through unvalidated parameters. Attackers can submit POST requests with script payloads in the SRC IP, DEST...
CVE-2026-21330
creationtimestamp| type| source ---|---|--- 2026-02-11 11:17:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mele4dy5fx2a...
CVE-2026-23720
creationtimestamp| type| source ---|---|--- 2026-02-10 10:17:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meiqbm6tvf22 2026-02-17 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-048-01...
GHSA-G8HP-MQ4H-RQM3
creationtimestamp| type| source ---|---|--- 2026-02-10 07:34:51+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/116045177891975357...
CVE-2026-0391
creationtimestamp| type| source ---|---|--- 2026-02-06 01:29:20+00:00| seen| https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3me5qvt57gqn2 2026-02-06 06:33:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116022286160152070 2026-02-06 12:38:18+00:00| seen|...
CVE-2026-21862
RustFS is a distributed object storage system built in Rust. Prior to version alpha.78, IP-based access control can be bypassed: getconditionvalues trusts client-supplied X-Forwarded-For/X-Real-Ip without verifying a trusted proxy, so any reachable client can spoof aws:SourceIp and satisfy...
PT-2026-6412
Summary IP-based access control can be bypassed: get condition values trusts client-supplied X-Forwarded-For/X-Real-Ip without verifying a trusted proxy, so any reachable client can spoof aws:SourceIp and satisfy IP-allowlist policies. Details - Vulnerable code: rustfs/src/auth.rs:289-304 sets...
PT-2026-6099
Name of the Vulnerable Software and Affected Versions RustFS versions prior to alpha.78 Description RustFS, a distributed object storage system, had a flaw in its access control mechanism. Specifically, the get condition values function improperly trusted the X-Forwarded-For and X-Real-Ip headers...
CVE-2026-1546
creationtimestamp| type| source ---|---|--- 2026-01-28 23:54:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjhv3k3of2n...
CVE-2025-55102
A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A specially crafted network packet of "Packet Too Big" with more than 15 different source address can lead to denial of service. An attacker can send a malicious packet to trigger this...
CVE-2025-59101
Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authenticated. No other session information ...
CVE-2025-59103
creationtimestamp| type| source ---|---|--- 2026-01-26 12:31:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mddarqzocd2g...
EUVD-2025-206365
Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authenticated. No other session information ...
PT-2026-4751
Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authenticated. No other session information ...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37961)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37961 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipvs: fix uninit-value for saddr in...