383 matches found
CVE-2026-21862
RustFS is a distributed object storage system built in Rust. Prior to version alpha.78, IP-based access control can be bypassed: getconditionvalues trusts client-supplied X-Forwarded-For/X-Real-Ip without verifying a trusted proxy, so any reachable client can spoof aws:SourceIp and satisfy...
PT-2026-6412
Summary IP-based access control can be bypassed: get condition values trusts client-supplied X-Forwarded-For/X-Real-Ip without verifying a trusted proxy, so any reachable client can spoof aws:SourceIp and satisfy IP-allowlist policies. Details - Vulnerable code: rustfs/src/auth.rs:289-304 sets...
PT-2026-6099
Name of the Vulnerable Software and Affected Versions RustFS versions prior to alpha.78 Description RustFS, a distributed object storage system, had a flaw in its access control mechanism. Specifically, the get condition values function improperly trusted the X-Forwarded-For and X-Real-Ip headers...
CVE-2026-1546
creationtimestamp| type| source ---|---|--- 2026-01-28 23:54:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjhv3k3of2n...
CVE-2025-55102
A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A specially crafted network packet of "Packet Too Big" with more than 15 different source address can lead to denial of service. An attacker can send a malicious packet to trigger this...
CVE-2025-59101
Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authenticated. No other session information ...
CVE-2025-59103
creationtimestamp| type| source ---|---|--- 2026-01-26 12:31:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mddarqzocd2g...
EUVD-2025-206365
Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authenticated. No other session information ...
PT-2026-4751
Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authenticated. No other session information ...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37961)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37961 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipvs: fix uninit-value for saddr in...
CVE-2021-43113
creationtimestamp| type| source ---|---|--- 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875...
CVE-2025-58093
creationtimestamp| type| source ---|---|--- 2026-01-20 16:30:40+00:00| seen| https://infosec.place/objects/86c1cfe3-6826-4fb9-8bab-2163ea39c0ed...
CVE-2025-57786
creationtimestamp| type| source ---|---|--- 2026-01-20 16:30:28+00:00| seen| https://infosec.place/objects/86a7e37b-7497-4e1e-a5b7-4089969abfa5...
CVE-2026-1150
creationtimestamp| type| source ---|---|--- 2026-01-19 12:12:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcrmhrgh7a2h...
CVE-2026-1023
creationtimestamp| type| source ---|---|--- 2026-01-16 03:24:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10640-0fd0b-2.html 2026-01-16 05:54:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcjfwahsnt2c 2026-01-16 15:03:03+00:00| seen|...
CVE-2025-71123
creationtimestamp| type| source ---|---|--- 2026-01-15 09:41:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115898454591231001 2026-05-10 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260511 2026-07-28 16:22:28+00:00|...
RHSA-2026:0453
creationtimestamp| type| source ---|---|--- 2026-01-12 19:01:36+00:00| seen| https://gist.github.com/Darkcrai86/eb55dd03cc8e7a9e958e54c7a9af3eb0...
CVE-2025-13964
creationtimestamp| type| source ---|---|--- 2026-01-06 12:48:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbqyfahjwi2c...
GHSA-VFRF-VCJ7-WVR8 Signal K Server Vulnerable to Access Request Spoofing
The SignalK access request system has two related features that when combined by themselves and with the infromation disclosure vulnerability enable convincing social engineering attacks against administrators. When a device creates an access request, it specifies three fields: clientId,...