395 matches found
Malicious code in @businessapp-microsites/apis (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b70ab5da6865ec94b15097fa84836ab41f39b65a5277974b407c545d8d424c7f @businessapp-microsites/[email protected] is a dependency-confusion squat against the private scope @businessapp-microsites, published with an implausibl...
CVE-2026-13595
creationtimestamp| type| source ---|---|--- 2026-06-29 11:35:26+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgfhgeqpc2t 2026-07-04 06:40:02+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mpshbrrqn724 2026-07-04 06:40:15+00:00| seen|...
SUSE CVE-2026-53006
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6rcv Caching saddr and daddr before pskbpull is problematic since skb-head can change. Remove these temporary variables: - We only access &ipv6hdrskb-saddr and &ipv6hdrskb-daddr when netdbgratelimit...
golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement
Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...
GHSA-X527-X647-Q7GG golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement
Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...
EUVD-2026-31398
golang.org/x/crypto/ssh: Invoking VerifiedPublicKeyCallback permissions skip enforcement...
CVE-2026-53262
creationtimestamp| type| source ---|---|--- 2026-06-25 10:00:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp46bjq5hv2c...
CVE-2026-46752
creationtimestamp| type| source ---|---|--- 2026-06-25 04:42:55+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mp3mk3hdhq2w 2026-06-25 12:00:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mp4eylvcab2b 2026-06-25 12:00:39+00:00| seen|...
CVE-2026-53006
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6rcv Caching saddr and daddr before pskbpull is problematic since skb-head can change. Remove these temporary variables: - We only access &ipv6hdrskb-saddr and &ipv6hdrskb-daddr when netdbgratelimit...
CVE-2026-53006 ipv6: fix possible UAF in icmpv6_rcv()
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6rcv Caching saddr and daddr before pskbpull is problematic since skb-head can change. Remove these temporary variables: - We only access &ipv6hdrskb-saddr and &ipv6hdrskb-daddr when netdbgratelimit...
CVE-2026-56815
creationtimestamp| type| source ---|---|--- 2026-06-23 16:31:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moxt6vyz4g2t 2026-06-23 21:31:57+00:00| seen| https://bsky.app/profile/payloadforge.io/post/3moydyj6t6s2m 2026-06-24 11:39:31+00:00| seen|...
CVE-2026-48882
creationtimestamp| type| source ---|---|--- 2026-06-22 13:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mouxszodmm2q...
CVE-2025-11694 Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities
A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in...
CVE-2025-11694 Rockwell Automation CompactLogix 5370 Controllers – Multiple Vulnerabilities
A security issue exists within 1769 CompactLogix controllers due to the missing validation of sequence numbers and source IP addresses in the CIP protocol. This allows attacker to abuse the exposed Connection ID’s visible on the web interface to perform denial-of-service attacks, resulting in...
CVE-2025-11694
The CVE-2025-11694 issue affects 1769 CompactLogix controllers (CIP protocol). The root cause is missing validation of sequence numbers and source IP addresses, enabling an attacker to abuse exposed Connection IDs visible on the web interface to trigger denial-of-service conditions resulting in a...
CVE-2026-12087
Summary: CVE-2026-12087 affects Perl’s Socket module prior to 2.041. The vulnerability is an out-of-bounds heap read in pack_ip_mreq_source(), where a length check is performed before reading, but a short source (<4 bytes) is copied into a fixed 4-byte field, causing the copy to read up to 3 b...
CVE-2026-8385
creationtimestamp| type| source ---|---|--- 2026-06-14 16:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mob65io5xk2i 2026-06-15 12:07:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3modapctgs22b 2026-07-23 06:00:06+00:00| confirmed|...
CVE-2026-8895
creationtimestamp| type| source ---|---|--- 2026-06-09 07:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntnmwxq7f2j 2026-06-10 11:16:54+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mnwlk2bnvx2m...
GHSA-2VQW-3MP8-CGMX Puma PROXY Protocol v1 Accepts Repeated Protocol Headers on Persistent Connections
Impact Puma is vulnerable to source IP spoofing when setremoteaddress proxyprotocol: :v1 is enabled and persistent connections are used. PROXY protocol v1 is a connection-level protocol. Support was added to Puma in v5.5.0. A proxy sends one PROXY header at the beginning of a TCP connection, befo...