CVE-2026-110929

A flaw was found in OpenSSH. On platforms that cannot pass file descriptors and that need root to allocate a terminal, the post-authentication session process keeps root privilege. An authenticated user can then perform actions as root, including privileged socket connections and binding forwards...

WordPress Aculect AI Companion plugin <= 0.8.1 - Unvalidated Redirects and Forwards vulnerability

Unvalidated Redirects and Forwards vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Aculect AI Companion versions = 0.8.1...

PT-2026-114171

Name of the Vulnerable Software and Affected Versions GitPython versions prior to 3.2.0 Description Remote code execution is possible because Git.ls remote forwards URLs without performing check unsafe protocols validation. This allows attackers to execute commands by supplying ext:: remote-helpe...

MAL-2026-13407 Malicious code in @0l00000l/auth (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb367562977f8319b3d37aab67a64f2298ae3a9b41d5980a7c66d22c3d135923 The package presents itself as a generic authentication library and exposes register/login/logout/verifyEmail/forgotPassword/resetPassword/verifyToke...

Max-Forwards Header - Detect

Max-Forwards response header is specified. !/usr/bin/env python3 -- coding: utf-8 -- """Max-Forwards response header is specified.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Max-Forwards Header - Detect',...

Server-Side Request Forgery

Next.js is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper validation of Host-associated headers during Server Action forwards and redirects, allowing attackers to redirect outbound requests to malicious or internal hosts and potentially expose sensitive...

CVE-2026-47082

An issue was discovered in cyrus-imapd in Cyrus IMAP through 3.12.2. The vacation "fcc" feature skips the destination-mailbox ACL. A user whose vacation Sieve script used :fcc to save a copy of the sent message could deliver vacation auto-reply copies into any mailbox the script could name,...

SUSE CVE-2025-27093

Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each other unrestrictedly, potentially...

EUVD-2005-1321

Malware in sbrugna...

RLSA-2025:7094 Moderate: aardvark-dns security update

Authoritative DNS server for A/AAAA container records Forwards other request to configured resolvers. Read more about configuration in src/backend/mod.rs. Security Fixes: containers/aardvark-dns: TCP Query Handling Flaw in Aardvark-dns Leading to Denial of Service CVE-2024-8418 For more details...

EUVD-2021-32619

Malicious code in bioql PyPI...

CVE-2025-9166

A denial-of-service security issue exists in the affected product and version. The security issue stems from the controller repeatedly attempting to forward messages. The issue could result in a major nonrecoverable fault on the controller...

Linux Distros Unpatched Vulnerability : CVE-2021-29943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server...

WordPress WP Clone any post type Plugin <= 3.6 - Open Redirect vulnerability

Open Redirect vulnerability discovered by Abdi Pranata in WordPress Plugin WP Clone any post type versions = 3.6...

PT-2024-23210

Name of the Vulnerable Software and Affected Versions HCL BigFix Compliance versions prior to 2.0.11 Description The issue affects HCL BigFix Compliance due to unvalidated redirects and forwards. An attacker can manipulate the HOST header, resulting in web cache poisoning, which can serve malicio...

PT-2024-38863 · Cisco · Cisco Router

Name of the Vulnerable Software and Affected Versions: Cisco Router affected versions not specified Description: The issue concerns unvalidated redirects and forwards in Cisco Router. No specific details about the issue are available due to the rejection of the candidate number. Recommendations: ...

WordPress FV Player plugin <= 7.5.44.7212 - Unvalidated Redirects and Forwards vulnerability

Unvalidated Redirects and Forwards vulnerability discovered by Byeongjun Jo Patchstack Alliance in WordPress Plugin FV Flowplayer Video Player versions = 7.5.44.7212...

WordPress FV Flowplayer Video Player Plugin <= 7.5.44.7212 is vulnerable to Unvalidated Redirects and Forwards

Software FV Flowplayer Video Player Type Plugin Vulnerable versions = 7.5.44.7212 Fixed in 7.5.45.7212 OWASP Top 10 A3: Injection Classification Unvalidated Redirects and Forwards CVE CVE-2024-32078 Patch priority Low CVSS severity Low 4.1 Developer Claim ownership PSID cc8148fa1127 Credits...

opening-hours.ninja Open Redirect vulnerability OBB-3764579

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Juniper Networks Junos OS Evolved Access Control Error Vulnerability

Juniper Networks Junos OS Evolved is an upgraded version of Juniper Networks' Junos OS. A security vulnerability exists in Juniper Networks Junos OS Evolved. An attacker could exploit the vulnerability to bypass MAC address checking, allowing MAC addresses that are not intended to reach neighbori...