50801 matches found
FBI Seizes NetNut Domains as Google Disrupts 2M Device Proxy Network
FBI and Google disrupt NetNut after domains linked to its residential proxy network are seized, exposing abuse of 2 million TVs and streaming devices worldwide...
CVE-2026-14612
creationtimestamp| type| source ---|---|--- 2026-07-03 18:15:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpr5p36m2x2g 2026-07-03 18:38:09+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpr6wxqjhl25...
CVE-2026-14631 webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header
webpack-dev-server versions 5.2.5 and earlier terminate the whole Node.js process when an unauthenticated peer sends either a normal HTTP request with a malformed Host header or a WebSocket upgrade to the default /ws endpoint with a malformed Origin header. The malformed value causes an uncaught...
CVE-2026-14631 webpack-dev-server vulnerable to denial of service via a malformed Host or Origin header
webpack-dev-server versions 5.2.5 and earlier terminate the whole Node.js process when an unauthenticated peer sends either a normal HTTP request with a malformed Host header or a WebSocket upgrade to the default /ws endpoint with a malformed Origin header. The malformed value causes an uncaught...
CVE-2026-14631
Vulnerability overview: CVE-2026-14631 affects webpack-dev-server up to version 5.2.5. An unauthenticated peer sending a normal HTTP request with a malformed Host header or a WebSocket upgrade to /ws with a malformed Origin header triggers an uncaught exception in the host-validation path, crashi...
cpcs-prototype
CPCS — Camera-Based Passenger Counting System Proof of co...
CVE-2026-14620 webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints
webpack-dev-server versions 5.2.5 and earlier expose two internal developer endpoints, /webpack-dev-server/open-editor and /webpack-dev-server/invalidate, that perform state-changing actions on any GET request without verifying that the request originated from the dev server's own page. Any websi...
CVE-2026-14620 webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints
webpack-dev-server versions 5.2.5 and earlier expose two internal developer endpoints, /webpack-dev-server/open-editor and /webpack-dev-server/invalidate, that perform state-changing actions on any GET request without verifying that the request originated from the dev server's own page. Any websi...
CVE-2026-14615
A flaw was found in the Fine-Grained Admin Permissions FGAP v2 implementation within Keycloak's administrative services. When FGAP v2 is enabled, the system fails to properly filter child groups based on the caller's specific permissions when requested through a parent group. This allows a...
CVE-2026-14615
A flaw was found in the Fine-Grained Admin Permissions FGAP v2 implementation within Keycloak's administrative services. When FGAP v2 is enabled, the system fails to properly filter child groups based on the caller's specific permissions when requested through a parent group. This allows a...
Insufficient Granularity of Access Control
Overview org.keycloak:keycloak-server-spi-private is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Insufficient Granularity of Access Control in the group retrieval due to an improper conditional...
CVE-2026-14614 Keycloak-services: keycloak-services: fgap v2 client scope assignment bypass via clientresource
A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions FGAP v2 is enabled. This issue allows a delegated administrator, who should only have limited control over specific clients, to attach or remove hidden client scopes that they are not...
CVE-2026-14614
A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions FGAP v2 is enabled. This issue allows a delegated administrator, who should only have limited control over specific clients, to attach or remove hidden client scopes that they are not...
CVE-2022-12345
creationtimestamp| type| source ---|---|--- 2026-07-03 15:14:58+00:00| seen| https://gist.github.com/tu-trinh-scale/6baf0f5ea0937524d8f4fea836f71481...
CVE-2026-14612
Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler can cause out-of-bounds memory access when processing an oversized response from a configured external OAuth2/OIDC Identity Provider. An attacker who controls or can man-in-the-middle the IdP endpoint may b...
CVE-2026-59092
creationtimestamp| type| source ---|---|--- 2026-07-03 15:05:40+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpqt322vpe2l 2026-07-03 15:09:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqtcm3jca2n...
CVE-2026-56015
creationtimestamp| type| source ---|---|--- 2026-07-03 14:26:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpqquiykdy2k 2026-07-03 14:57:07+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mpqslp3c2k24 2026-07-04 04:13:10+00:00| seen|...
MINI-4VX8-FJ5F-22XF
Bulletin has no description...
