GHSA-3G2F-4RJG-9385

creationtimestamp| type| source ---|---|--- 2026-01-14 17:15:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115894579878017350 2026-01-24 21:25:03+00:00| seen| https://gist.github.com/alon710/6415b2515d3828512026474d72b46a73 2026-01-24 22:34:31+00:00| seen|...

CVE-2026-22262

creationtimestamp| type| source ---|---|--- 2026-01-14 17:13:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115894572299072531...

CVE-2025-71113

creationtimestamp| type| source ---|---|--- 2026-01-14 16:43:52+00:00| seen| https://gist.github.com/Darkcrai86/e24b1e3140311d9d351e6cc3ab471664 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-71118

creationtimestamp| type| source ---|---|--- 2026-01-14 16:42:27+00:00| seen| https://gist.github.com/Darkcrai86/780b1c6573d4230530b3d99264a431a0 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-04-02 17:00:00+00:00| seen|...

CVE-2025-37184 Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention

A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication requirements. Successful exploitation could allow an attacker to create an admin user account without the necessary multi-factor authentication, thereby...

CVE-2025-37184 Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention

A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication requirements. Successful exploitation could allow an attacker to create an admin user account without the necessary multi-factor authentication, thereby...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview outray is an OutRay CLI - Expose your local server to the internet Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition during registration. An attacker can bypass subscription limitations by rapidly initiating multiple tunnel creation...

CVE-2025-71143

creationtimestamp| type| source ---|---|--- 2026-01-14 15:45:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcffzej3z22c 2026-05-10 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260511...

CVE-2026-0888

creationtimestamp| type| source ---|---|--- 2026-01-14 15:25:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcfevvzt2i2i 2026-01-15 15:20:08+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mchv3bxl7m2s...

CVE-2026-0882

creationtimestamp| type| source ---|---|--- 2026-01-14 15:25:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcfevvzt2i2i 2026-01-15 00:01:42+00:00| seen| https://bsky.app/profile/slackers.it/post/3mcgbqyshaj2x 2026-01-15 15:20:08+00:00| seen|...

CVE-2026-0890

creationtimestamp| type| source ---|---|--- 2026-01-14 15:25:29+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcfevvzt2i2i 2026-01-15 00:01:45+00:00| seen| https://bsky.app/profile/slackers.it/post/3mcgbr2z5jy2a 2026-01-15 15:20:09+00:00| seen|...

CVE-2026-0906

creationtimestamp| type| source ---|---|--- 2026-01-14 15:25:16+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mcfevj3gvr26 2026-01-20 05:58:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcti27is4e2m 2026-01-20 17:28:16+00:00| seen|...

CVE-2026-22820 Outray cli is vulnerable to race conditions in tunnels creation

Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5...

EUVD-2026-2015

Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5...

CVE-2026-22820 Outray cli is vulnerable to race conditions in tunnels creation

Outray openSource ngrok alternative. Prior to 0.1.5, a TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. This vulnerability is fixed in 0.1.5...

CVE-2026-22238 Administrator Account Creation Vulnerability in BLUVOYIX

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable admin API to create a new user with admin privileges. Successful...

CVE-2026-22238 Administrator Account Creation Vulnerability in BLUVOYIX

The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable admin API to create a new user with admin privileges. Successful...

CVE-2026-22238

The CVE-2026-22238 issue affects BLUVOYIX and stems from improper authentication in the BLUVOYIX admin APIs. An unauthenticated remote attacker can send crafted HTTP requests to create a new admin user, potentially granting full access to customer data and compromising the platform by logging in ...

CVE-2025-56227

creationtimestamp| type| source ---|---|--- 2026-01-14 12:58:37+00:00| seen| https://gist.github.com/Sisyphus-wang/0fd71cd0aae22f3abf7ab07a09feb3d4...

CVE-2025-59020

By exploiting the defVals parameter, attackers could bypass field‑level access checks during record creation in the TYPO3 backend. This gave them the ability to insert arbitrary data into prohibited exclude fields of a database table for which the user already has write permission for a reduced s...