Lucene search
+L

17212 matches found

ATTACKERKB
ATTACKERKB
added 2026/01/23 3:24 p.m.6 views

CVE-2026-22981

In the Linux kernel, the following vulnerability has been resolved: idpf: detach and close netdevs while handling a reset Protect the reset path from callbacks by setting the netdevs to detached state and close any netdevs in UP state until the reset handling has completed. During a reset, the...

5.5CVSS5.2AI score0.00117EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2026/01/23 3:24 p.m.52 views

CVE-2026-22981

CVE-2026-22981 pertains to the Linux kernel driver for IDPF (Intel Ethernet 800/900-series? context in the doc refers to idpf) where, during reset handling, netdev interfaces are detached/closed to protect the reset path. The vulnerability description states that if reset handling succeeds, netde...

5.5CVSS5.3AI score0.00117EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/01/23 3:24 p.m.12 views

CVE-2026-22981

In the Linux kernel, the following vulnerability has been resolved: idpf: detach and close netdevs while handling a reset Protect the reset path from callbacks by setting the netdevs to detached state and close any netdevs in UP state until the reset handling has completed. During a reset, the...

5.5CVSS5.3AI score0.00117EPSS
SaveExploits0
OSV
OSV
added 2026/01/23 3:24 p.m.10 views

CVE-2026-22981 idpf: detach and close netdevs while handling a reset

In the Linux kernel, the following vulnerability has been resolved: idpf: detach and close netdevs while handling a reset Protect the reset path from callbacks by setting the netdevs to detached state and close any netdevs in UP state until the reset handling has completed. During a reset, the...

5.3AI score
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/01/23 3:22 p.m.16 views

CVE-2026-23760

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An...

9.8CVSS6.3AI score0.95692EPSS
SaveExploits3References1
GithubExploit
GithubExploit
added 2026/01/23 3:10 p.m.207 views

Exploit for Origin Validation Error in Appsmith

CVE-2026-22794 - Appsmith Origin Header Injection !Python V...

9.6CVSS5.9AI score0.004EPSS
SaveExploits3
CNNVD
CNNVD
added 2026/01/23 12:00 a.m.14 views

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from idpf failing to separate and shut down network devices during password reset operations,...

5.5CVSS5.8AI score0.00117EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/23 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-22993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - idpf: Fix RSS LUT NULL ptr issue after soft reset During soft reset, the RSS LUT is freed and not restored unless the interface is up. If an ethtool command tha...

5.5CVSS5.5AI score0.00117EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/23 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-22981

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - idpf: detach and close netdevs while handling a reset Protect the reset path from callbacks by setting the netdevs to detached state and close any netdevs in UP...

5.5CVSS5.5AI score0.00117EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/23 12:00 a.m.3 views

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004872)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004872 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Add TMF to tmrlist handling An abort that is responded to by iSCSI itself is...

7.5CVSS7AI score0.00735EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/01/22 5:54 p.m.286 views

WT-2026-0001

SmarterMail WT-2026-0001 Authentication Bypass Exploit 📌 O...

6.1AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/22 5:34 p.m.12 views

CVE-2026-0834

Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 TDDP module allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the adjacent network can remotely trigger...

8.8CVSS5.5AI score0.00421EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/22 3:16 p.m.8 views

CVE-2026-23760

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An...

9.8CVSS6AI score0.95692EPSS
SaveExploits3References6
NVD
NVD
added 2026/01/22 3:16 p.m.9 views

CVE-2026-23760

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An...

9.8CVSS0.95692EPSS
SaveExploits3References6
Vulnrichment
Vulnrichment
added 2026/01/22 2:35 p.m.9 views

CVE-2026-23760 SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An...

9.3CVSS6.3AI score0.95692EPSS
SaveExploits3References4
CVE
CVE
added 2026/01/22 2:35 p.m.157 views

CVE-2026-23760

SmarterTools SmarterMail versions before build 9511 are affected by an authentication bypass in the password reset API. The force-reset-password endpoint allows anonymous requests and does not verify the current password or a reset token when resetting system administrator accounts, enabling an u...

9.8CVSS6.3AI score0.95692EPSS
SaveIn wildExploits3References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/22 2:35 p.m.7 views

CVE-2026-23760

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An...

9.8CVSS6.1AI score0.95692EPSS
SaveIn wildExploits3References6
Cvelist
Cvelist
added 2026/01/22 2:35 p.m.33 views

CVE-2026-23760 SmarterTools SmarterMail < Build 9511 Authentication Bypass via Password Reset API

SmarterTools SmarterMail versions prior to build 9511 contain an authentication bypass vulnerability in the password reset API. The force-reset-password endpoint permits anonymous requests and fails to verify the existing password or a reset token when resetting system administrator accounts. An...

9.3CVSS0.95692EPSS
SaveExploits3References4
The Hacker News
The Hacker News
added 2026/01/22 9:46 a.m.25 views

SmarterMail Auth Bypass Exploited in the Wild Two Days After Patch Release

A new security flaw in SmarterTools SmarterMail email software has come under active exploitation in the wild, two days after the release of a patch. The vulnerability, which currently does not have a CVE identifier, is tracked by watchTowr Labs as WT-2026-0001. It was patched by SmarterTools on...

10CVSS7.1AI score0.95692EPSS
SaveExploits18
GithubExploit
GithubExploit
added 2026/01/22 7:19 a.m.314 views

Exploit for Uncontrolled Resource Consumption in Ietf Http

Exploit-Title-HTTP-2-2.0---Denial-Of-Service-DOS-...

7.5CVSS8.1AI score0.99999EPSS
SaveExploits21
Rows per page
Query Builder