Lucene search
+L

10359 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/03/08 7:01 p.m.•14 views

Malicious code in arnavtest123 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d77a638a8dbd52def0458fe1227c5dd5491bc8fedb0ae9e50f28eed74e4ef89d During installation, the package starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

6AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2026/03/08 7:01 p.m.•11 views

MAL-2026-1288 Malicious code in arnavtest123 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d77a638a8dbd52def0458fe1227c5dd5491bc8fedb0ae9e50f28eed74e4ef89d During installation, the package starts a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

6AI score
SaveExploits0References1
EUVD
EUVD
•added 2026/03/07 9:30 a.m.•23 views

EUVD-2026-10139

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

6.5AI score0.00645EPSS
SaveExploits0References2
osv_ghsa
osv_ghsa
•added 2026/03/07 9:30 a.m.•14 views

GHSA-7XRH-HQFC-G7QR Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

7.4CVSS6.5AI score0.00645EPSS
SaveExploits0References6
osv_debian
osv_debian
•added 2026/03/07 9:16 a.m.•15 views

DEBIAN-CVE-2026-24281

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

7.4CVSS6.5AI score0.00645EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/07 9:16 a.m.•17 views

CVE-2026-24281

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

7.4CVSS0.00645EPSS
SaveExploits0References10
UbuntuCve
UbuntuCve
•added 2026/03/07 9:16 a.m.•11 views

CVE-2026-24281

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

7.4CVSS6.5AI score0.00645EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/03/07 9:16 a.m.•17 views

UBUNTU-CVE-2026-24281

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

7.4CVSS6.5AI score0.00645EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/03/07 8:50 a.m.•10 views

CVE-2026-24281 Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

6.5AI score0.00645EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/03/07 8:50 a.m.•16 views

CVE-2026-24281 Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

5.9CVSS7.2AI score
SaveExploits0References13
attackerkb
attackerkb
•added 2026/03/07 8:50 a.m.•16 views

CVE-2026-24281

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

6.5AI score0.00645EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2026/03/07 8:50 a.m.•5 views

CVE-2026-24281

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

8.2CVSS6.5AI score0.00645EPSS
SaveExploits0References16
Cvelist
Cvelist
•added 2026/03/07 8:50 a.m.•52 views

CVE-2026-24281 Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

0.00645EPSS
SaveExploits0References1
CVE
CVE
•added 2026/03/07 8:50 a.m.•157 views

CVE-2026-24281

CVE-2026-24281 — Apache ZooKeeper ZKTrustManager reverse DNS fallback . The vulnerability arises when IP SAN validation fails and ZKTrustManager falls back to PTR-based name resolution, enabling attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with certificat...

7.4CVSS6.5AI score0.00645EPSS
SaveExploits0References10Affected Software1
Debian CVE
Debian CVE
•added 2026/03/07 8:50 a.m.•18 views

CVE-2026-24281

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

7.4CVSS6.5AI score0.00645EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/03/07 1:44 a.m.•18 views

CVE-2026-29613

OpenClaw versions prior to 2026.2.12 contain a vulnerability in the BlueBubbles optional plugin webhook handler in which it authenticates requests based solely on loopback remoteAddress without validating forwarding headers, allowing bypass of configured webhook passwords. When the gateway operat...

8.2CVSS6.2AI score0.00627EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/07 1:44 a.m.•14 views

CVE-2026-28465

OpenClaw's voice-call plugin versions before 2026.2.3 contain an improper authentication vulnerability in webhook verification that allows remote attackers to bypass verification by supplying untrusted forwarded headers. Attackers can spoof webhook events by manipulating Forwarded or X-Forwarded-...

8.2CVSS5.9AI score0.00702EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/03/07 12:00 a.m.•19 views

Apache Zookeeper 安全漏洞

Apache Zookeeper is a software project of the Apache Foundation in the United States. It provides open-source distributed configuration services, synchronization services, and naming registration capabilities for large-scale distributed computing systems. There is a security vulnerability in Apac...

7.4CVSS6.5AI score0.00645EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/03/07 12:00 a.m.•6 views

PT-2026-24621

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

7.4CVSS6.5AI score0.00645EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/07 12:00 a.m.•2 views

CVE-2026-24281: Reliance on Reverse DNS Resolution for a Security-Critical Action

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

7.4CVSS6.5AI score0.00645EPSS
SaveExploits0References5
Rows per page
Query Builder