395 matches found
CVE-2021-4456 Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact
Net::CIDR versions before 0.24 for Perl mishandle leading zeros in IP CIDR addresses, which may have unspecified impact. The functions addr2cidr and cidrlookup may return leading zeros in a CIDR string, which may in turn be parsed as octal numbers by subsequent users. In some cases an attacker ma...
CVE-2021-4456
CVE-2021-4456 affects the Perl module Net::CIDR (versions before 0.24). The issue stems from leading zeros in CIDR notation, where addr2cidr and cidrlookup may emit leading zeros thatParsing as octal could bypass IP-based restrictions. Fedora/OpenSUSE advisories note fixes have been released: Fed...
MetaCPAN Net::CIDR::Set 安全漏洞
MetaCPAN Net::CIDR::Set is a library from the MetaCPAN Foundation. Versions of MetaCPAN Net::CIDR::Set prior to 0.24 contained a security vulnerability. This vulnerability stemmed from improper handling of leading zeros in IP CIDR addresses, which could lead to bypassing IP-based access controls...
[SECURITY] Fedora 42 Update: golang-github-projectdiscovery-mapcidr-1.1.97-1.fc42
Utility program to perform multiple operations for a given subnet/CIDR ranges...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992384)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992384 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add the missing IPSETHASHWITHNET0 macro for ipsethashnetportnet.c The missing...
Exploit for Deserialization of Untrusted Data in Facebook React
$$\ $$\ $$$$$$$\ $$\ $$\ $$$$$$$$\ $$\ $...
Unity Linux 20.1050e Security Update: kernel (UTSA-2025-991118)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991118 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add the missing IPSETHASHWITHNET0 macro for ipsethashnetportnet.c The missing...
ROS-20251203-03
A vulnerability in the JMX interface of the Apache Cassandra distributed database management system is related to a flaw in the deserialization mechanism. flaws in the deserialization mechanism. Exploitation of the vulnerability could allow an attacker to implement a man-in-the-middle...
Slack Nebula may accept arbitrary source IP addresses
Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...
Slack Nebula 安全漏洞
Slack Nebula is a scalable overlay network tool from Slack open source. A security vulnerability exists in Slack Nebula versions prior to 1.9.7 that stems from improper CIDR handling in certain configurations, which could lead to the acceptance of arbitrary source IP addresses in the Nebula netwo...
CVE-2025-62820
Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...
EUVD-2025-35657
Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...
CVE-2025-62820
Slack Nebula prior to 1.9.7 is affected by a CIDR handling issue that allows accepting arbitrary source IPs within the Nebula network. The CVE entry documents this as a network‑level vulnerability with a CVSS v3.1 base score of 4.9 (Medium) and a high attack complexity, requiring low privileges a...
EUVD-2011-1500
Malware in sbrugna...
EUVD-2010-1254
Malware in sbrugna...
EUVD-2011-1738
Malware in sbrugna...
EUVD-2004-0431
Malware in sbrugna...
EUVD-2014-0239
Malware in sbrugna...