Lucene search
K

28 matches found

NVD
NVD
added 2026/03/04 5:16 p.m.4 views

CVE-2026-23808

A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key GTK on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthoriz...

8.1CVSS0.00076EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/03/04 4:9 p.m.4 views

CVE-2026-23808 Client Isolation Bypass via GTK Manipulation

A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key GTK on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthoriz...

5.4CVSS5.9AI score0.00076EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/03/04 4:9 p.m.30 views

CVE-2026-23808 Client Isolation Bypass via GTK Manipulation

A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Key GTK on a client device. Successful exploitation of this vulnerability could allow a remote malicious actor to perform unauthoriz...

5.4CVSS0.00076EPSS
Exploits0References1
CVE
CVE
added 2026/03/04 4:9 p.m.3 views

CVE-2026-23808

Summary: CVE-2026-23808 describes a vulnerability in a standardized wireless roaming protocol that could allow an attacker to install an attacker-controlled Group Temporal Key (GTK) on a client device. This could enable unauthorized frame injection, bypass of client isolation, disruption of cross...

8.1CVSS5.9AI score0.00076EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/04 12:0 a.m.3 views

PT-2026-22942

Name of the Vulnerable Software and Affected Versions affected versions not specified Description A flaw exists in a standardized wireless roaming protocol that may allow an attacker to install a manipulated Group Temporal Key GTK on a client device. Exploitation of this issue could lead to...

8.1CVSS5.8AI score0.00076EPSS
Exploits0References4
Veracode
Veracode
added 2025/12/23 10:2 a.m.4 views

Improper Access Control

github.com/bishopfox/sliver is vulnerable to Improper Access Control. The vulnerability is due to the custom WireGuard netstack not restricting traffic between connected clients, which allows an attacker with leaked or recovered keypairs to communicate with other implants, access exposed port...

6.3CVSS5.5AI score0.00038EPSS
Exploits0References4Affected Software1
SUSE CVE
SUSE CVE
added 2025/11/09 12:33 a.m.2 views

SUSE CVE-2025-27093

Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each other unrestrictedly, potentially...

6.3CVSS7AI score0.00038EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/10/29 8:11 p.m.1 views

CVE-2025-27093

Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each other unrestrictedly, potentially...

6.3CVSS6.9AI score0.00038EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/10/28 7:29 p.m.2 views

CVE-2025-27093 Sliver does not restricted traffic between Wireguard clients.

Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each other unrestrictedly, potentially...

6.3CVSS6.5AI score0.00038EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-2148

Malware in sbrugna...

8.1CVSS8.1AI score0.00723EPSS
Exploits1References2
F5 Networks
F5 Networks
added 2024/05/29 1:32 p.m.36 views

K000139609: NGINX HTTP/3 QUIC vulnerability CVE-2024-32760

Security Advisory Description When NGINX Plus or NGINX OSS are configured to use the HTTP/3 QUIC module, undisclosed HTTP/3 encoder instructions can cause NGINX worker processes to terminate or cause other potential impact. CVE-2024-32760 Note : This issue affects NGINX systems compiled with the...

6.5CVSS7.2AI score0.00497EPSS
Exploits0Affected Software2
OSV
OSV
added 2023/11/03 8:15 p.m.28 views

CVE-2022-3172

A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties...

8.2CVSS6.5AI score
Exploits0References3
OSV
OSV
added 2023/11/03 8:15 p.m.1 views

DEBIAN-CVE-2022-3172

A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties...

8.2CVSS6.6AI score0.03414EPSS
Exploits1References1
NVD
NVD
added 2023/11/03 8:15 p.m.19 views

CVE-2022-3172

A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties...

8.2CVSS6.3AI score0.03414EPSS
Exploits1References3
OSV
OSV
added 2023/11/03 8:15 p.m.0 views

UBUNTU-CVE-2022-3172

A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties...

8.2CVSS6.8AI score0.03414EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/11/03 6:11 p.m.28 views

CVE-2022-3172 Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)

A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties...

5.1CVSS8.2AI score0.03414EPSS
Exploits1References3
CVE
CVE
added 2023/11/03 6:11 p.m.1981 views

CVE-2022-3172

CVE-2022-3172 : Kubernetes kube-apiserver SSRF vulnerability allowing an aggregated API server to redirect client traffic to an arbitrary URL, potentially causing unintended actions and leaking API server credentials. Connected sources confirm affected product families (kube-apiserver) and that a...

8.2CVSS7.1AI score0.03414EPSS
Exploits1References3Affected Software1
Debian CVE
Debian CVE
added 2023/11/03 6:11 p.m.57 views

CVE-2022-3172

A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third parties...

8.2CVSS6.5AI score0.03414EPSS
Exploits1
NVD
NVD
added 2023/09/27 6:15 p.m.13 views

CVE-2023-20268

A vulnerability in the packet processing functionality of Cisco access point AP software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. This vulnerability is due to insufficient management of resources when handling certain types of traffic. An...

4.7CVSS4.8AI score0.00039EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/09/27 5:22 p.m.12 views

CVE-2023-20268 Cisco Access Point Software Uncontrolled Resource Consumption Vulnerability

A vulnerability in the packet processing functionality of Cisco access point AP software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. This vulnerability is due to insufficient management of resources when handling certain types of traffic. An...

4.7CVSS5.1AI score0.00039EPSS
Exploits0References1
Rows per page
Query Builder