521 matches found
CVE-2026-22246
Mastodon is a free, open-source social network server based on ActivityPub. Mastodon 4.3 added notifications of severed relationships, allowing end-users to inspect the relationships they lost as the result of a moderation action. The code allowing users to download lists of severed relationships...
CVE-2026-22246 Local Mastodon users can enumerate and access severed relationships of every other local user
Mastodon is a free, open-source social network server based on ActivityPub. Mastodon 4.3 added notifications of severed relationships, allowing end-users to inspect the relationships they lost as the result of a moderation action. The code allowing users to download lists of severed relationships...
PT-2026-2182
Name of the Vulnerable Software and Affected Versions Mastodon versions 4.3 through 4.3.16 Mastodon versions 4.4 through 4.4.10 Mastodon versions 4.5 through 4.5.3 Description Mastodon is a free, open-source social network server based on ActivityPub. A flaw exists in the code handling the downlo...
UBUNTU-CVE-2023-53995
In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix one memleak in inetdelifa I got the below warning when do fuzzing test: unregisternetdevice: waiting for bond0 to become free. Usage count = 2 It can be repoduced via: ip link add bond0 type bond sysctl -w...
CVE-2023-53943
GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identif...
CVE-2023-53943 GLPI 9.5.7 Username Enumeration Vulnerability via Lost Password Endpoint
GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identif...
CVE-2023-53943 GLPI 9.5.7 Username Enumeration Vulnerability via Lost Password Endpoint
GLPI 9.5.7 contains a username enumeration vulnerability in the lost password recovery mechanism that allows attackers to validate email addresses. Attackers can systematically test email addresses by submitting requests to the password reset endpoint and analyzing response differences to identif...
EUVD-2025-203664
In the Linux kernel, the following vulnerability has been resolved: veth: more robust handing of race to avoid txq getting stuck Commit dc82a33297fc "veth: apply qdisc backpressure on full ptrring to reduce TX drops" introduced a race condition that can lead to a permanently stalled TXQ. This was...
EUVD-2025-146871
Malicious code in uinsu-lost-dinau npm...
Malicious code in uinsu-lost-dauku (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e4d013f725492839ee5e7e57ea4f286f1dfae355aa14ae2e525646b7824f52a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-146878
Malicious code in uinsu-lost-dauniu npm...
EUVD-2025-146876
Malicious code in uinsu-lost-dauu npm...
Malicious code in uinsu-lost-din (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6aeba2a6031d1ca121b9a51a3b34ec959e9777f4c15fb2fc632aa432ae5e91f5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-146858
Malicious code in uinsu-lost-dulyakabu npm...
EUVD-2025-146863
Malicious code in uinsu-lost-diunsuta npm...
EUVD-2025-146865
Malicious code in uinsu-lost-diunst npm...
EUVD-2025-146881
Malicious code in uinsu-lost-dauku npm...
EUVD-2025-146866
Malicious code in uinsu-lost-diunsavvuta npm...