137490 matches found
UBUNTU-CVE-2026-73143
GHSA-38fq-mrrg-8rmr: RtlTcp: malformed greeting causes daemon exit...
CVE-2026-53788: Improper Neutralization of CRLF Sequences
rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters. Attackers can inject malicious newline characters into names...
RHEL 9 : nghttp2 (RHSA-2026:54662)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:54662 advisory. libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: nghttp2: HTTP...
PT-2026-71626
Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description A newline injection issue exists in the name-converter uid/gid mapping interface. Local attackers can forge protocol messages by creating user or group names that include newline characters. By injecti...
CVE-2026-53791: Authentication Bypass by Spoofing
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a...
PT-2026-71629
Name of the Vulnerable Software and Affected Versions rsync daemon versions prior to 3.5.0 Description An IP address spoofing issue exists that allows unauthenticated remote attackers to bypass IP-based access controls. By sending a crafted PROXY protocol header containing a forged source address...
CVE-2026-53791: Authentication Bypass by Spoofing
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a...
net/rsync -- multiple vulnerabilities
rsync project reports: This release fixes 33 security issues found during a focused audit of rsync's path handling and daemon protocol, a companion daemon-protocol fuzzing pass, and reports from external researchers -- plus several robustness hardenings. CVE IDs were assigned by VulnCheck CNA; th...
CVE-2026-59843 affecting package libssh for versions less than 0.10.6-9
CVE-2026-59843 affecting package libssh for versions less than 0.10.6-9. A patched version of the package is available...
CVE-2026-62299 affecting package coredns for versions less than 1.11.4-20
CVE-2026-62299 affecting package coredns for versions less than 1.11.4-20. A patched version of the package is available...
CVE-2026-73429
creationtimestamp| type| source ---|---|--- 2026-08-12 22:35:12+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-g9hv-x236-4qp3...
CVE-2026-73430
creationtimestamp| type| source ---|---|--- 2026-08-12 22:35:09+00:00| published-proof-of-concept| https://github.com/Eugeny/russh/security/advisories/GHSA-5xvq-cp9x-6p6r...
CVE-2026-59851 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-97FP-2VW9-Q5JG vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-FVWJ-J79Q-57V7 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59844 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-4H4R-Q9XG-GFMM vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-97FP-2VW9-Q5JG vulnerabilities
Vulnerabilities for packages: libssh...