EEF-CVE-2026-55953 TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

Summary The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tls\handshake:hello/5 handler validates the negotiated protocol version and the...

PT-2026-62515

Name of the Vulnerable Software and Affected Versions Oracle HTTP Server versions 12.2.1.4.0 Oracle HTTP Server versions 14.1.2.0.0 Description A flaw in the mod ssl component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise the server...

MiracleLinux 7 : rh-postgresql94-postgresql-9.4.12-1.el7 (AXSA:2017-1729:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1729:01 advisory. PostgreSQL is an advanced Object-Relational database management system DBMS. The base postgresql package contains the client programs that you'll ne...

EUVD-2021-21472

Malware in sbrugna...

EUVD-2019-0380

Malware in sbrugna...

EUVD-2013-6751

Malware in sbrugna...

EUVD-2021-7753

Malicious code in bioql PyPI...

AlmaLinux 9 : httpd (ALSA-2025:15023)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:15023 advisory. httpd: insufficient escaping of user-supplied data in modssl CVE-2024-47252 httpd: modssl: access control bypass by trusted clients is possible using TLS...

RHEL 8 : httpd:2.4 (RHSA-2025:15698)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:15698 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: insufficient...

CVE-2013-7384

UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service NULL pointer dereference and crash via unspecified vectors, related to SSL. NOTE: this issue was SPLIT from CVE-2013-6413 per ADT2 due to different vulnerability types...

Researcher Demonstrates Several Zoom Vulnerabilities at DEF CON 28

Popular video conferencing app Zoom has addressed several security vulnerabilities, two of which affect its Linux client that could have allowed an attacker with access to a compromised system to read and exfiltrate Zoom user data—and even run stealthy malware as a sub-process of a trusted...

CVE-2020-13614

An issue was discovered in ssl.c in Axel before 2.17.8. The TLS implementation lacks hostname verification...

CVE-2016-10466

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD...

cdi.sep.pt XSS vulnerability

Vulnerable URL: http://www.cdi.sep.pt/pesquisa/Pagpesq.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check cdi.sep.pt SSL...

nabery.ru Open Redirect vulnerability

Vulnerable URL: http://nabery.ru/redirect.php?url=http%3A//www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.11.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 9945253 VIP website status:| No Check...

seoularts.ac.kr XSS vulnerability

Vulnerable URL: https://www.seoularts.ac.kr/mbs/kr/jsp/member/login.jsp?id=/%27%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3Ekr090100000000 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.10.2017 Vulnerability type:| XSS Vulnerability status:| Public...

privatvideos.ab18.de XSS vulnerability

Vulnerable URL: http://privatvideos.ab18.de/community/register2/index.php Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

dianora.ma XSS vulnerability

Vulnerable URL: http://www.dianora.ma/agenda.php?id=1%22%27--!%3E%3Cscript%3Ealert'OPENBUGBOUNTY'%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:07 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

realtyatthelake.com XSS vulnerability

Vulnerable URL: http://www.realtyatthelake.com/default.asp?printable=true=expandedformat==1content=results%22--!%3E%3CSvg/Onload=confirm'OPENBUGBOUNTY'%3E%22number=837094 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability...

dsderendinger.ch XSS vulnerability

Vulnerable URL: http://www.dsderendinger.ch/suchen/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 5528227 VIP website status:| No Check dsderendinger.ch SSL connection:| Grade: F...