479 matches found
GHSA-G8HP-MQ4H-RQM3
creationtimestamp| type| source ---|---|--- 2026-02-10 07:34:51+00:00| seen| https://infosec.exchange/users/harrysintonen/statuses/116045177891975357...
CVE-2026-0391
creationtimestamp| type| source ---|---|--- 2026-02-06 01:29:20+00:00| seen| https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3me5qvt57gqn2 2026-02-06 06:33:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116022286160152070 2026-02-06 12:38:18+00:00| seen|...
CVE-2026-21862
RustFS is a distributed object storage system built in Rust. Prior to version alpha.78, IP-based access control can be bypassed: getconditionvalues trusts client-supplied X-Forwarded-For/X-Real-Ip without verifying a trusted proxy, so any reachable client can spoof aws:SourceIp and satisfy...
PT-2026-6412
Summary IP-based access control can be bypassed: get condition values trusts client-supplied X-Forwarded-For/X-Real-Ip without verifying a trusted proxy, so any reachable client can spoof aws:SourceIp and satisfy IP-allowlist policies. Details - Vulnerable code: rustfs/src/auth.rs:289-304 sets...
PT-2026-6099
Name of the Vulnerable Software and Affected Versions RustFS versions prior to alpha.78 Description RustFS, a distributed object storage system, had a flaw in its access control mechanism. Specifically, the get condition values function improperly trusted the X-Forwarded-For and X-Real-Ip headers...
CVE-2026-1546
creationtimestamp| type| source ---|---|--- 2026-01-28 23:54:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdjhv3k3of2n...
CVE-2025-55102
A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A specially crafted network packet of "Packet Too Big" with more than 15 different source address can lead to denial of service. An attacker can send a malicious packet to trigger this...
CVE-2025-59101
Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authenticated. No other session information ...
CVE-2025-59103
creationtimestamp| type| source ---|---|--- 2026-01-26 12:31:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mddarqzocd2g...
EUVD-2025-206365
Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authenticated. No other session information ...
PT-2026-4751
Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authenticated. No other session information ...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37961)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37961 advisory. - In the Linux kernel, the following vulnerability has been resolved: ipvs: fix uninit-value for saddr in...
CVE-2021-43113
creationtimestamp| type| source ---|---|--- 2026-01-21 21:18:16+00:00| seen| https://vulnerability.circl.lu/bundle/bbcbc485-b88d-4831-b8e9-6e37e7bd9875...
CVE-2025-58093
creationtimestamp| type| source ---|---|--- 2026-01-20 16:30:40+00:00| seen| https://infosec.place/objects/86c1cfe3-6826-4fb9-8bab-2163ea39c0ed...
CVE-2025-57786
creationtimestamp| type| source ---|---|--- 2026-01-20 16:30:28+00:00| seen| https://infosec.place/objects/86a7e37b-7497-4e1e-a5b7-4089969abfa5...
CVE-2026-1150
creationtimestamp| type| source ---|---|--- 2026-01-19 12:12:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcrmhrgh7a2h...
CVE-2026-1023
creationtimestamp| type| source ---|---|--- 2026-01-16 03:24:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10640-0fd0b-2.html 2026-01-16 05:54:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcjfwahsnt2c 2026-01-16 15:03:03+00:00| seen|...
CVE-2025-71123
creationtimestamp| type| source ---|---|--- 2026-01-15 09:41:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/115898454591231001 2026-05-10 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260511 2026-07-28 16:22:28+00:00|...