CVE-2025-9909

The CVE-2025-9909 issue affects Red Hat Ansible Automation Platform Gateway route creation: improper gateway_path handling allows an attacker with admin privileges to create misleading routes (double-slash prefix) to intercept credentials, potentially enabling persistent backdoors. It is describe...

CVE-2025-9909 Aap-gateway: improper path validation in gateway allows credential exfiltration

A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash // prefix in the gatewaypath. A malicious or socially engineered administrator can configure a...

CVE-2026-3283

creationtimestamp| type| source ---|---|--- 2026-02-27 06:00:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfszu2p6da2z...

CVE-2026-3281

creationtimestamp| type| source ---|---|--- 2026-02-27 05:55:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfszl43ipj2u...

CVE-2026-28370

creationtimestamp| type| source ---|---|--- 2026-02-27 05:20:17+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsxmajhfh2d 2026-02-27 05:20:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfsxmz252f2s 2026-02-27 06:58:30+00:00| seen|...

CVE-2026-27578

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could inject arbitrary scripts into pages rendered by the n8n application using different techniques on various nodes Form Trigger...

GHSA-PHWV-C562-GVMH

creationtimestamp| type| source ---|---|--- 2026-02-27 04:10:19+00:00| seen| https://gist.github.com/alon710/bd389c3761f00f62851a6d5cd2e46410...

CVE-2026-27942

creationtimestamp| type| source ---|---|--- 2026-02-27 03:40:19+00:00| seen| https://gist.github.com/alon710/a27d67a44ac5804fb1959c01e9c562d6 2026-02-27 12:00:53+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mftnymvk462u 2026-02-28 10:10:32+00:00| seen|...

GHSA-62CR-6WP5-Q43H

creationtimestamp| type| source ---|---|--- 2026-02-27 03:10:18+00:00| seen| https://gist.github.com/alon710/5a2e5affef6dd7e5863b811b8e50c918...

GHSA-7GCC-R8M5-44QM

creationtimestamp| type| source ---|---|--- 2026-02-27 02:40:18+00:00| seen| https://gist.github.com/alon710/9c24edd6758ed34c527e00be66673a79...

GHSA-JH8H-6C9Q-7GMW

creationtimestamp| type| source ---|---|--- 2026-02-27 01:40:18+00:00| seen| https://gist.github.com/alon710/c0095b0ad4a6fd43c1592021bdf2e7f5 2026-02-27 01:54:32+00:00| seen| https://bsky.app/profile/flarestart.bsky.social/post/3mfsm4ebfwr2b...

GHSA-38C7-23HJ-2WGQ

creationtimestamp| type| source ---|---|--- 2026-02-27 00:40:19+00:00| seen| https://gist.github.com/alon710/2b47423cec6eddc2fceeb701acd589b2...

GHSA-GJ6X-Q8RH-WJ6X

creationtimestamp| type| source ---|---|--- 2026-02-27 00:10:19+00:00| seen| https://gist.github.com/alon710/8f17f9c15768fb9e715dace4af33516b...

PT-2026-22312

Name of the Vulnerable Software and Affected Versions rubyipmi affected versions not specified Description A flaw exists in rubyipmi, a gem used in the Baseboard Management Controller BMC component of Red Hat Satellite. An authenticated attacker possessing host creation or update permissions can...

PT-2026-22389

Name of the Vulnerable Software and Affected Versions phpMyFAQ versions prior to 4.0.18 Description The WebAuthn prepare endpoint, /api/webauthn/prepare, in versions prior to 4.0.18 lacks authentication, CSRF protection, captcha, or configuration checks. This allows unauthenticated attackers to...

phpMyFAQ 安全漏洞

phpMyFAQ is a multilingual, fully database-driven FAQ system developed by Thorsten Rinne. Versions of phpMyFAQ prior to 4.0.18 contained security vulnerabilities. These vulnerabilities stemmed from the WebAuthn prepare endpoint, which lacked authentication and CSRF protection, allowing unverified...

CVE-2019-25458

creationtimestamp| type| source ---|---|--- 2026-02-26 23:20:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfsdibxcxg23...

GHSA-8G8J-R87H-P36X

creationtimestamp| type| source ---|---|--- 2026-02-26 23:10:18+00:00| seen| https://gist.github.com/alon710/698e47d7e7b029f09315d51259967445...

CVE-2026-27151

creationtimestamp| type| source ---|---|--- 2026-02-26 22:57:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfsca2spa22n...

GHSA-VJF3-2GPJ-233V n8n has an SSO Enforcement Bypass in its Self-Service Settings API

Impact An authenticated user signed in through Single Sign-On SSO could disable SSO enforcement for their own account through the n8n API. This allowed the user to create a local password and authenticate directly with email and password, completely bypassing the organization's SSO policy,...