5 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-67293
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.29.0 affected versions = 3.28.0 contains an improper certificate hostname validation vulnerability. The TLS hostname matcher tlsmatchhostname i...
CVE-2026-63730 HyperDX < 2.31.0 SSRF via Webhook Test Endpoint
HyperDX before 2.31.0 contains a server-side request forgery vulnerability that allows authenticated team members to direct the server to make requests to arbitrary internal network destinations by supplying a caller-controlled URL to the webhook test endpoint. Attackers can bypass the insufficie...
CVE-2025-1220
CVE-2025-1220 (PHP Hostname Null Character Vulnerability) affects PHP 8.1.x/8.2.x/8.3.x/8.4.x prior to patched releases. Public advisories (ALSA 2026-1409, Astra Linux, ALAS2023-2025-1087/1088/1113, etc.) indicate the issue arises from fsockopen/hostname handling and can affect access checks. Rem...
The vulnerabilities of the Device Manager Server, Device Manager Agent, and Host Data Collector components of the Hitachi Device Manager system allow attackers to execute “man-in-the-middle” type attacks.
The vulnerability of the Device Manager Server, Device Manager Agent, and Host Data Collector components of the Hitachi Device Manager storage management system is related to an inconsistency in the host name due to incorrect validation of SSL/TLS certificates. Exploiting this vulnerability could...
Apache Pulsar 信任管理问题漏洞
Apache Pulsar is the United States Apache Apache Foundation for cloud environments, set of messages, storage, lightweight functional computing as one of the distributed message flow platform. The software supports multi-tenancy, persistent storage, multi-machine room cross-region data replication...