16701 matches found
CVE-2026-19685
creationtimestamp| type| source ---|---|--- 2026-08-24 18:08:36+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mttvjzjd6o2t 2026-08-24 18:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttwqgvsaf2e 2026-08-24 18:50:26+00:00| seen|...
CVE-2026-71300
Improper input validation vulnerability in Apache Camel Atmosphere Websocket component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-atmosphere-websocket producer selects which connected WebSocket peers a message is...
CVE-2026-77995
creationtimestamp| type| source ---|---|--- 2026-08-24 13:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117150726686144491 2026-08-24 13:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mttfyp326q2f 2026-08-24 15:50:06+00:00| seen|...
Astra Linux – Vulnerability in python-cryptography
A flaw was discovered in the python-cryptography package. This issue may allow a remote attacker to decrypt captured messages in TLS servers that use RSA key exchanges, which could result in the exposure of confidential or sensitive data...
Astra Linux – Vulnerability in SOX
There is a heap-based buffer overflow vulnerability in the sphere.c startread function of the Sound Exchange libsox 14.4.2 version and the main commit 42b3557e. A specially crafted file can lead to a heap buffer overflow. An attacker can provide a malicious file to exploit this vulnerability...
Astra Linux – Vulnerability in gst-plugins-bad1.0
GStreamer MXF File Parsing: Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability, but the attack vectors may vary...
Astra Linux – Vulnerability in gnutls28
A vulnerability was identified: the response times for malformed ciphertexts in RSA-PSK ClientKeyExchange differ from those of ciphertexts with correct PKCS1 v1.5 padding...
Astra Linux – Vulnerability in gst-plugins-bad1.0
GStreamer MXF File Parsing: Integer Overflow and Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability, but the attack vectors may va...
Astra Linux – Vulnerability in libssh
A flaw was discovered in libssh’s handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, especially...
Astra Linux – Vulnerability in libssh
A flaw was discovered in libssh, a library that implements the SSH protocol. When calculating the session ID during the key exchange KEX process, a failure in cryptographic functions may lead to a NULL pointer being dereferenced. This issue can cause the client or server to crash...
Astra Linux – Vulnerability in gnutls28
A timing side-channel vulnerability in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be used to recover the key encrypted in the RSA ciphertext across a network, in a Bleichenbacher-style attack. To successfully decrypt the data, the attacker would...
Astra Linux – Vulnerability in libssh2
In libssh2 before version 1.9.0, the kexmethoddiffiehellmangroupexchangesha256keyexchange function in kex.c contains an integer overflow that could lead to an out-of-bounds read when packets are read from the server. A remote attacker who compromises an SSH server may be able to disclose sensitiv...
CVE-2026-78251
creationtimestamp| type| source ---|---|--- 2026-08-24 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117149310942090116 2026-08-24 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtsruvafgr2c 2026-08-24 08:17:44+00:00| seen|...
CVE-2026-78050
creationtimestamp| type| source ---|---|--- 2026-08-22 23:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtphorg3bo2p 2026-08-23 00:00:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/117141879828855162 2026-08-23 00:00:37+00:00| seen|...
CVE-2026-78003
creationtimestamp| type| source ---|---|--- 2026-08-22 09:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117138340214723722 2026-08-22 09:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtnvxy3zpx2c 2026-08-22 09:03:42+00:00| seen|...
Microsoft Exchange Server SSRF Vulnerability
This vulnerability is part of an attack chain that could allow remote code execution on Microsoft Exchange Server. The initial attack requires the ability to make an untrusted connection to Exchange server port 443. Other portions of the chain can be triggered if an attacker already has access or...
EUVD-2026-63689
Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-65801
Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...
