GHSA-VFRF-VCJ7-WVR8 Signal K Server Vulnerable to Access Request Spoofing

The SignalK access request system has two related features that when combined by themselves and with the infromation disclosure vulnerability enable convincing social engineering attacks against administrators. When a device creates an access request, it specifies three fields: clientId,...

CVE-2021-47747

creationtimestamp| type| source ---|---|--- 2025-12-31 21:57:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbcucfujvl2y...

CVE-2025-15203

creationtimestamp| type| source ---|---|--- 2025-12-29 23:17:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5xtjjl442q...

CVE-2025-15003

creationtimestamp| type| source ---|---|--- 2025-12-22 01:36:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mak3ubkp6j2q...

CVE-2019-25229

creationtimestamp| type| source ---|---|--- 2025-12-18 22:59:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3macbo3vbb72x...

CVE-2025-14050

creationtimestamp| type| source ---|---|--- 2025-12-13 07:32:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7u3kk2cz62m...

CVE-2025-55311

creationtimestamp| type| source ---|---|--- 2025-12-11 17:27:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7q3v25jek2e...

CVE-2025-63060

creationtimestamp| type| source ---|---|--- 2025-12-09 15:29:47+00:00| seen| https://gist.github.com/Darkcrai86/423bdb32c4082bb8887293e8d9a25d48...

SUSE CVE-2025-13086

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7alpha1 through 2.7rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client...

CVE-2025-13086

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7alpha1 through 2.7rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client...

CVE-2025-13086

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7alpha1 through 2.7rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client...

CVE-2025-13086

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7alpha1 through 2.7rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client...

GHSA-F469-JH82-97FV

creationtimestamp| type| source ---|---|--- 2025-12-03 17:12:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115656748477885093...

CVE-2022-49104

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2022-49749

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2023-52812

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2024-46807

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2022-50406

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2024-26828

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

Ubuntu 24.04 LTS / 25.04 / 25.10 : OpenVPN vulnerability (USN-7898-1)

The remote Ubuntu 24.04 LTS / 25.04 / 25.10 host has a package installed that is affected by a vulnerability as referenced in the USN-7898-1 advisory. Joshua Rogers discovered that OpenVPN incorrectly handled HMAC verification checks. A remote attacker could possibly use this issue to bypass sour...