USN-7898-1 openvpn vulnerability

Joshua Rogers discovered that OpenVPN incorrectly handled HMAC verification checks. A remote attacker could possibly use this issue to bypass source IP address validation...

Improper Input Validation

OpenVPN is vulnerable to Improper Input Validation. The vulnerability is due to improper validation of source IP addresses during session handling, which allows an attacker to open a session from a different IP address than the one that initiated the connection and cause a denial of service for t...

GHSA-FJF5-XGMQ-5525

creationtimestamp| type| source ---|---|--- 2025-11-25 20:35:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115612248474210596...

CVE-2025-13524

creationtimestamp| type| source ---|---|--- 2025-11-21 23:46:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m66hqqsxin2k...

CVE-2025-12592

creationtimestamp| type| source ---|---|--- 2025-11-19 13:09:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5yd7yytym26 2025-11-19 15:14:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115577012235338015...

CVE-2025-12404

creationtimestamp| type| source ---|---|--- 2025-11-18 09:09:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vfdeuync2k...

FreeBSD : OpenVPN -- HMAC verification on source IP address ineffective (17a40d76-c3fd-11f0-b513-0da7be77c170)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 17a40d76-c3fd-11f0-b513-0da7be77c170 advisory. Arne Schwabe reports: Fix memcmp check for the hmac verification in the 3way handshake being inverted...

CVE-2024-44662

creationtimestamp| type| source ---|---|--- 2025-11-17 21:19:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5u5mzsmi62b...

CVE-2025-61831

creationtimestamp| type| source ---|---|--- 2025-11-11 19:45:45+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m5evlgi2l4l2...

CVE-2022-50595

creationtimestamp| type| source ---|---|--- 2025-11-06 21:53:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4ykgcauim2q...

CVE-2025-64109

creationtimestamp| type| source ---|---|--- 2025-11-05 01:51:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4twsheogp2s 2025-11-05 03:30:35+00:00| seen| https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4u4chxbz5h2 2025-11-05 08:58:04+00:00| seen|...

CVE-2025-40080

creationtimestamp| type| source ---|---|--- 2025-10-28 15:29:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4barzrfb32p 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

PT-2025-43703

Name of the Vulnerable Software and Affected Versions Watu Quiz plugin for WordPress versions prior to 3.4.5 Description The Watu Quiz plugin for WordPress is susceptible to Stored Cross-Site Scripting through the HTTP Referer header. This occurs because of inadequate input sanitization and outpu...

CVE-2025-60564

creationtimestamp| type| source ---|---|--- 2025-10-24 17:05:02+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115430228081612773...

Slack Nebula may accept arbitrary source IP addresses

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...

CVE-2025-62820

Slack Nebula before 1.9.7 mishandles CIDR in some configurations and thus accepts arbitrary source IP addresses within the Nebula network...

CVE-2025-5555

creationtimestamp| type| source ---|---|--- 2025-10-20 07:34:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3mciklpbv2a...

CVE-2025-62506

creationtimestamp| type| source ---|---|--- 2025-10-18 03:18:53+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m3gtbnsinr2a 2025-10-18 04:43:56+00:00| seen| https://bsky.app/profile/crowdcyber.bsky.social/post/3m3gxzr7lw22s 2025-10-23 10:18:17+00:00| seen|...

CVE-2025-6893

creationtimestamp| type| source ---|---|--- 2025-10-17 10:34:57+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3f36igt6o2e 2025-10-17 13:34:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115389765944283292 2025-10-24 07:43:11+00:00| seen| https://t.me/icscert/1339...

CVE-2025-11492

creationtimestamp| type| source ---|---|--- 2025-10-17 00:04:25+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3dxwygcl62e 2025-10-17 05:18:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m3ejixlaun27 2025-10-18 03:09:33+00:00| seen|...