40922 matches found
CVE-2026-49841 FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, the modverto HTTP request handler allocates a fixed 2 MiB buffer for a POST...
CVE-2026-49841
FreeSWITCH is affected by a pre-authentication heap overflow in the mod_verto HTTP POST body read. Before version 1.11.1, the mod_verto HTTP request handler allocates a fixed 2 MiB buffer for application/x-www-form-urlencoded bodies but accepts Content-Length up to just under 10 MiB. The body-rea...
EUVD-2026-35472
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, the modverto HTTP request handler allocates a fixed 2 MiB buffer for a POST...
CVE-2026-49841 FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, the modverto HTTP request handler allocates a fixed 2 MiB buffer for a POST...
CVE-2026-49948 Mem0 0.2.8 Missing Authorization via POST /configure Endpoint
Mem0 versions through 0.2.8, fixed in commit ae7f406, contain a missing authorization vulnerability in the self-hosted server component where the POST /configure endpoint modifies global LLM provider and embedder configuration but only verifies authentication via JWT or X-API-Key without validati...
CVE-2026-5714
creationtimestamp| type| source ---|---|--- 2026-06-09 14:27:43+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mnufr2tffa2t 2026-06-11 10:16:26+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnyynlbxdh2f...
CVE-2026-42488
creationtimestamp| type| source ---|---|--- 2026-06-09 13:47:28+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnudj4gyhs25 2026-06-10 04:24:52+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-xen...
CVE-2026-42487
creationtimestamp| type| source ---|---|--- 2026-06-09 13:37:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mnucx6ujgc2i 2026-06-09 13:41:01+00:00| seen| https://infosec.exchange/users/andersonc0d3/statuses/116720431315436112 2026-06-10 04:24:52+00:00| seen|...
CVE-2026-46319
creationtimestamp| type| source ---|---|--- 2026-06-09 13:34:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnucrro7ok2s 2026-07-01 02:34:17+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260630 2026-07-06 06:23:25+00:00| seen...
CVE-2017-20244
Wow Forms WordPress Plugin version 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to read arbitrary database information by exploiting an unescaped POST parameter. Attackers can inject SQL code through the 'mwpformid' parameter in requests to the admin-ajax.php...
CVE-2016-20065
Product Catalog 8 1.2 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the selectedCategory parameter. Attackers can submit POST requests to the admin-ajax.php endpoint with the...
metasploitable2-pentest
Metasploitable 2 Penetration Test Date: June 2026 Teste...
CVE-2017-20244
creationtimestamp| type| source ---|---|--- 2026-06-09 13:10:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnubgn2hzw2v...
CVE-2016-20065
creationtimestamp| type| source ---|---|--- 2026-06-09 13:06:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnub7o3bq32o...
CVE-2026-46324
creationtimestamp| type| source ---|---|--- 2026-06-09 13:04:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnub4iiajl2o...
CVE-2017-20248
creationtimestamp| type| source ---|---|--- 2026-06-09 13:02:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuazhzkb22l...
Post-Quantum Cryptography Is Coming, but Your DNS Might Not Be Ready
Learn why crypto-agility depends not just on adopting the right standards, but on maintaining a clear, unified view of your DNS environment before the migration begins...
CVE-2026-7556
creationtimestamp| type| source ---|---|--- 2026-06-09 12:39:33+00:00| seen| https://bsky.app/profile/donwebmedia.bsky.social/post/3mnu7pncyhk2s 2026-06-11 07:16:39+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnyoloutkh2w...
CVE-2026-47895
creationtimestamp| type| source ---|---|--- 2026-06-09 12:35:15+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mnu7hwjqqy25 2026-06-10 14:24:44+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mnwvzxxw4224 2026-06-10 14:24:49+00:00| seen|...