69 matches found
SUSE CVE-2025-27093
Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each other unrestrictedly, potentially...
EUVD-2005-1321
Malware in sbrugna...
RLSA-2025:7094 Moderate: aardvark-dns security update
Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in src/backend/mod.rs. Security Fixes: containers/aardvark-dns: TCP Query Handling Flaw in Aardvark-dns Leading to Denial of Service CVE-2024-8418 For more details...
EUVD-2021-32619
Malicious code in bioql PyPI...
CVE-2025-9166
A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller...
Linux Distros Unpatched Vulnerability : CVE-2021-29943
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server...
WordPress WP Clone any post type Plugin <= 3.6 - Open Redirect vulnerability
Open Redirect vulnerability discovered by Abdi Pranata in WordPress Plugin WP Clone any post type versions = 3.6...
PT-2024-38863 · Cisco · Cisco Router
Name of the Vulnerable Software and Affected Versions: Cisco Router affected versions not specified Description: The issue concerns unvalidated redirects and forwards in Cisco Router. No specific details about the issue are available due to the rejection of the candidate number. Recommendations: ...
WordPress FV Player plugin <= 7.5.44.7212 - Unvalidated Redirects and Forwards vulnerability
Unvalidated Redirects and Forwards vulnerability discovered by Byeongjun Jo Patchstack Alliance in WordPress Plugin FV Flowplayer Video Player versions = 7.5.44.7212...
WordPress FV Flowplayer Video Player Plugin <= 7.5.44.7212 is vulnerable to Unvalidated Redirects and Forwards
Software FV Flowplayer Video Player Type Plugin Vulnerable versions = 7.5.44.7212 Fixed in 7.5.45.7212 OWASP Top 10 A3: Injection Classification Unvalidated Redirects and Forwards CVE CVE-2024-32078 Patch priority Low CVSS severity Low 4.1 Developer Claim ownership PSID cc8148fa1127 Credits...
opening-hours.ninja Open Redirect vulnerability OBB-3764579
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Juniper Networks Junos OS Evolved Access Control Error Vulnerability
Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit the vulnerability to bypass MAC address checking, allowing MAC addresses that are not intended to reach neighbori...
facilitatorsc.com Open Redirect vulnerability OBB-3512483
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE CVE-2022-2880
Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the quer...
aerobasegroup.com Open Redirect vulnerability OBB-3142543
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
OpenWrt Cross-Site Scripting Vulnerability (CNVD-2022-00601)
OpenWrt, a Linux operating system for embedded devices, is vulnerable to a cross-site scripting vulnerability in version 21.02.1, which stems from a lack of effective filtering and escaping of user-submitted parameters in the Port Forwards Add Name screen. No detailed vulnerability details are...
CVE-2021-45904
OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen...
Design/Logic Flaw
OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen...
CVE-2021-45904
OpenWrt 21.02.1 is affected by CVE-2021-45904, a cross-site scripting (XSS) vulnerability in the Port Forwards Add Name screen caused by insufficient input filtering/escaping. The vulnerability details in connected sources confirm the affected software/version and the underlying issue. There is n...
CVE-2021-45904
OpenWrt 21.02.1 allows XSS via the Port Forwards Add Name screen...