Lucene search
+L

32679 matches found

Github Security Blog
Github Security Blog
added 2026/05/05 12:40 a.m.19 views

Axios: no_proxy bypass via IP alias allows SSRF

The fix for noproxy hostname normalization bypass 10661 is incomplete.When noproxy=localhost is set, requests to 127.0.0.1 and ::1 still route through the proxy instead of bypassing it. The shouldBypassProxy function does pure string matching — it does not resolve IP aliases or loopback...

7.5CVSS5.8AI score0.00301EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/05/05 12:40 a.m.11 views

GHSA-M7PR-HJQH-92CM Axios: no_proxy bypass via IP alias allows SSRF

The fix for noproxy hostname normalization bypass 10661 is incomplete.When noproxy=localhost is set, requests to 127.0.0.1 and ::1 still route through the proxy instead of bypassing it. The shouldBypassProxy function does pure string matching — it does not resolve IP aliases or loopback...

6.8CVSS5.8AI score0.00301EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/05/05 12:00 a.m.27 views

PT-2026-37284

Name of the Vulnerable Software and Affected Versions Open edx Enterprise Service versions 7.0.2 through 7.0.4 Description An authenticated user with the Enterprise Admin role can trigger a server-side HTTP request. By using the 'SAMLProviderConfigViewSet' PATCH endpoint, a user can set the...

8.5CVSS5.9AI score0.00301EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2026/05/05 12:00 a.m.32 views

PT-2026-37306

Name of the Vulnerable Software and Affected Versions ssrfcheck versions 1.3.0 and earlier Description ssrfcheck fails to block Server-Side Request Forgery SSRF attacks when a target private IP address is encoded as an IPv4-mapped IPv6 address e.g., 'http://::ffff:127.0.0.1/'. This occurs because...

8.2CVSS5.8AI score0.00226EPSS
SaveExploits0References4
AlmaLinux
AlmaLinux
added 2026/05/05 12:00 a.m.21 views

Important: image-builder security update

A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 For more details about the security issues, including the impact, a CVSS score,...

7.5CVSS5.8AI score0.00728EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/05 12:00 a.m.15 views

PT-2026-37221

Twenty is an open source CRM built with NestJS Node.js. In versions 1.18.0 and earlier, the SSRF protection in twenty-server's SecureHttpClientService can be bypassed using IPv4-mapped IPv6 addresses in URL IP literals. Node.js's URL parser normalizes IPv4-mapped IPv6 addresses to compressed hex...

8.3CVSS5.8AI score0.0024EPSS
SaveExploits0References2
NVD
NVD
added 2026/05/04 9:16 p.m.52 views

CVE-2026-42223

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag...

6.5CVSS0.00295EPSS
SaveExploits1References2
NVD
NVD
added 2026/05/04 8:16 p.m.23 views

CVE-2026-41926

WDR201A WiFi Extender HW V2.1, FW LFMZX28040922V1.02 contains an OS command injection vulnerability in the firewall.cgi binary across five request handlers that apply insufficient input validation. Attackers can inject arbitrary shell commands through vulnerable parameters like websURLFilter,...

9.3CVSS0.01235EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/05/04 8:12 p.m.7 views

CVE-2026-42223 nginx-ui: Settings API Exposes Protected Secrets

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag...

6.5CVSS5.7AI score0.00295EPSS
SaveExploits1References2
CVE
CVE
added 2026/05/04 8:12 p.m.46 views

CVE-2026-42223

Nginx UI (nginx-ui) before version 2.3.8 exposes sensitive settings through the GetSettings API. The handler serializes all settings structs to JSON and returns them to authenticated users, while the protected:"true" tag is only enforced on writes, not reads. This leaks 40+ protected fields, incl...

6.5CVSS5.7AI score0.00295EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/04 8:12 p.m.9 views

CVE-2026-42223

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.8, the GetSettings API handler api/settings/settings.go:24-65 serializes all settings structs to JSON and returns them to authenticated users. Many sensitive fields are tagged with protected:"true" - however, this tag...

6.5CVSS5.7AI score0.00295EPSS
SaveExploits1References3Affected Software1
Snyk
Snyk
added 2026/05/04 5:28 p.m.9 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read via the ParseIP6Extended function. An attacker can cause the application to crash or become unresponsive by supplying a specially crafted BGP UPDATE message. Remediation Upgrade github.com/osrg/gobgp/pkg/packet/bgp to...

8.7CVSS5.8AI score0.00335EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/04 5:16 p.m.13 views

UBUNTU-CVE-2026-37461

An out-of-bounds read in the ParseIP6Extended function /bgp/bgp.go of gobgp v4.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted BGP UPDATE message...

7.5CVSS5.8AI score0.00335EPSS
SaveExploits0References5
CVE
CVE
added 2026/05/04 2:52 p.m.47 views

CVE-2025-13605

The CVE-2025-13605 vulnerability affects the 3onedata GW1101-1D(RS-485)-TB-P Modbus gateway (hardware version V2.2.0). An authenticated user can execute arbitrary shell commands with root privileges by supplying a payload in the IP address field of the diagnosis test tools. This issue has a CVSSv...

9.3CVSS6AI score0.00198EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/04 2:52 p.m.100 views

CVE-2025-13605 Shell command injection in 3onedata GW1101-1D(RS-485)-TB-P modbus gateway

3onedata modbus gateway device model GW1101-1DRS-485-TB-P hardware version V2.2.0 allows authenticated users to execute arbitrary shell commands in the context of the root user by providing payload in the "IP address" field of the diagnosis test tools. This issue has been resolved in firmware...

9.3CVSS0.00198EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/05/04 2:31 p.m.12 views

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

7.5CVSS7.3AI score0.00728EPSS
SaveExploits0References8
OSV
OSV
added 2026/05/04 1:12 p.m.12 views

JLSEC-2026-417 libcurl did not check the server certificate of TLS connections done to a host specified as an IP...

libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address, therefore completely skipping the certificate...

6.5CVSS7.3AI score0.01333EPSS
SaveExploits1References15
Cvelist
Cvelist
added 2026/05/04 12:39 a.m.62 views

CVE-2026-7161 GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability

An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak. An attacker can listen to broadcast messages to trigger this vulnerability. When interacting with variou...

9.3CVSS0.00223EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/04 12:00 a.m.10 views

RHCOS 4 / 9 : OpenShift Container Platform 4.16.z (RHSA-2024:8418)

The remote Red Hat Enterprise Linux CoreOS 4 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:8418 advisory. - github.com/jaraco/zipp: Denial of Service infinite loop via crafted zip file in jaraco/zipp CVE-2024-5569 - Podman: Buildah:...

9.8CVSS7AI score0.01952EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2026/05/04 12:00 a.m.14 views

CVE-2026-37461

An out-of-bounds read in the ParseIP6Extended function /bgp/bgp.go of gobgp v4.3.0 allows attackers to cause a Denial of Service DoS via supplying a crafted BGP UPDATE message...

5.8AI score0.00335EPSS
SaveExploits0References3
Rows per page
Query Builder