CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP

CVE-2026-22011 – iOS MDM Profile Delivery over HTTP Program Code Python Flask MDM server mdmserver.py - Serves enrollment profile over plain HTTP from flask import Flask, sendfile app = Flaskname @app.route'/enroll.mobileconfig' def serveprofile: Vulnerability: profile delivered without HTTPS...

CVE-2019-6440

CVE-2019-6440: Tested products: Zemana antimalware v.2.74.2.150 & Zemana antilogger v.2.74.204.150. Fixed since v.2.74.2.664 About vulnerability: This vulnerability allowed attackers to get SYSTEM privileges on target machines without user interaction. Requirements: 1. Attacker must be able to...

CVE-2026-123497

Vikunja veans before 2.7.1 contains a protocol downgrade vulnerability in serverCandidates that allows on-path attackers to force plain HTTP during veans init and login. Attackers can block HTTPS ports so discovery accepts an unverified HTTP response, capturing passwords, TOTP codes or bot tokens...

Exploit for CVE-2026-109518

cve-2026-109518-apt-patch-proxmox-and-generic Silly little pat...

Malicious code in @ifasn/md-doc-mcp (npm)

Source: amazon-inspector 808d25733e867c0cb6808f89bbed4cc90e8362b1e1a2e52759676d51bd0273bb The package is advertised as a markdown toolkit MCP server TOC generation, word count, table formatting but on require of its main module and on startup of its md-doc-mcp bin it probes cloud-provider...

Malicious code in @ifasn/md-doc-mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 808d25733e867c0cb6808f89bbed4cc90e8362b1e1a2e52759676d51bd0273bb The package is advertised as a markdown toolkit MCP server TOC generation, word count, table formatting but on require of its main module and on...

Malicious code in @greenlake/context-pane (npm)

@greenlake/context-pane is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 3.0.0, 1.0.0 has a postinstall script that runs node beacon.cjs on npm instal...

MAL-2026-18286 Malicious code in @ppa-web-components/ppa-navigation (npm)

@ppa-web-components/ppa-navigation is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 1.0.1, 1.0.0, 2.0.0, 99.0.1, 3.0.0, 2.0.1 has a postinstall script...

CVE-2026-116166

SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS setting but never enforces it, so the kernel port keeps serving full API access over plain HTTP alongside HTTPS. Network-adjacent attackers can sniff the cleartext login flow and session cookie, which lacks the Secure attribute...

SiYuan encryption issue vulnerability

Versions 3.6.0 through 3.8.7 of SiYuan contain an encryption vulnerability. This flaw arises because networkServeTLS settings are accepted and persisted but never enforced, allowing kernel ports to provide full API access via plain HTTP outside of HTTPS. Compromised attackers on adjacent networks...

SUSE CVE-2026-113866

When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request included the credentials the user had entered, allowing a network attacker to obtain the user's password. This vulnerabilit...

Two critical RCEs in PHP core

Update 10/22: Added section detailing observations of in the wild exploitation and associated IOCs. Cisco Talos is tracking the disclosure of two unauthenticated remote code execution RCE flaws in PHP core, dubbed "php2shell", triggered by a plain HTTP request and exploitable before any applicati...

Linux Distros Unpatched Vulnerability : CVE-2026-113866

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that...

Malicious code in @securihackbot/depconf-stage-1792484738 (npm)

Source: amazon-inspector d8d8706d2a75c053047537a4f57f754a572a1ca4cec4cde80d00e453878013e1 The package's npm postinstall hook automatically executes on install and transmits installer-identifying data to a hardcoded remote endpoint. It collects os.hostname, the local username, platform/arch, Node...

DEBIAN-CVE-2026-113866

When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request included the credentials the user had entered, allowing a network attacker to obtain the user's password. This vulnerabilit...

CVE-2026-113866

When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request included the credentials the user had entered, allowing a network attacker to obtain the user's password. This vulnerabilit...

CVE-2026-113866

A flaw in Thunderbird allows a network attacker to intercept user credentials during account setup. The Exchange AutoDiscover lookup incorrectly queries the domain's AutoDiscover service over unencrypted HTTP , including the user's entered credentials in the plaintext request. An attacker monitor...

CVE-2026-113866 Account password sent unencrypted during Exchange account setup

When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request included the credentials the user had entered, allowing a network attacker to obtain the user's password. This vulnerabilit...

CVE-2026-113866

When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request included the credentials the user had entered, allowing a network attacker to obtain the user's password. This vulnerabilit...

CVE-2026-113866 Account password sent unencrypted during Exchange account setup

When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service over plain HTTP. Due to a bug, that unencrypted request included the credentials the user had entered, allowing a network attacker to obtain the user's password. This vulnerabilit...