26976 matches found
CVE-2026-43964
Postfix versions affected by CVE-2026-43964 include 3.8.x prior to 3.8.16, 3.9.x prior to 3.9.10, and 3.10.x prior to 3.10.9. The issue is a buffer over-read that can trigger a process crash when handling an enhanced status code that lacks text after the third number. Multiple advisories (OSV, NV...
CVE-2026-43964
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number...
CVE-2026-43964
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number...
CVE-2026-41181
creationtimestamp| type| source ---|---|--- 2026-05-04 16:54:31+00:00| published-proof-of-concept| https://github.com/traefik/traefik/security/advisories/GHSA-p6hg-qh38-555r 2026-05-05 14:35:27+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3ml4fuoznxy2b 2026-05-05 16:20:01+00:00|...
CVE-2026-33523 Apache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status line
HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers. This issue affects Apache HTTP Server: from through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes the issue...
JLSEC-2026-418 When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP...
When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error tha...
Information Exposure
org.springframework.grpc, spring-grpc-core is vulnerable to information exposure through error messages. The vulnerability is due to returning raw server-side AuthenticationException messages in the gRPC status description, which allows an attacker to gather authentication failure details and...
CVE-2026-341431
creationtimestamp| type| source ---|---|--- 2026-05-04 10:13:34+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-419 2026-05-04 15:30:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkzyhwb6zh27...
CVE-2026-7709
creationtimestamp| type| source ---|---|--- 2026-05-04 00:53:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkyhi6bccn2k...
CVE-2026-7708
creationtimestamp| type| source ---|---|--- 2026-05-04 00:48:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkyh77suye2k...
PT-2026-37111
Name of the Vulnerable Software and Affected Versions Traefik versions prior to 2.11.44 Traefik versions prior to 3.6.15 Traefik versions prior to 3.7.0-rc.3 Description An information disclosure issue exists in the errors custom error pages middleware. When a backend returns a response matching...
Postfix 安全漏洞
Postfix is an open-source mail transfer agent software developed by Postfix. Vulnerabilities existed in versions prior to Postfix 3.8.16, 3.9.10, and 3.10.9. These vulnerabilities stemmed from the lack of text after the third digit in enhanced status codes, which could lead to excessive buffer...
Traccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking (CSWSH)
Exploit Title: Traccar GPS Tracking System 6.11.1 - Cross-Site WebSocket Hijacking CSWSH Date: 2026-02-26 Exploit Author: Hazar Taspinar Vendor Homepage: https://www.traccar.org/ Software Link: https://github.com/traccar/traccar Version: = 6.11.1 Tested on: Windows 11 / Linux CVE: CVE-2025-68930...
PT-2026-37161
Name of the Vulnerable Software and Affected Versions CI4MS versions 0.26.0 through 0.31.7.0 Description The auth filter contains commented-out code for checking if a user is deactivated or banned. While the loggedIn function in CodeIgniter Shield verifies the status field to identify banned user...
Velociraptor 安全漏洞
Velociraptor is an open-source tool developed by Velocidex, designed for querying and collecting host-based status information using the Velociraptor Query Language VQL. Versions of Velociraptor prior to 0.76.4 contained security vulnerabilities. These vulnerabilities stemmed from a resource...
CVE-2026-43964: Off-by-one Error
Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced status code that lacks text after the third number...
CVE-2026-42786
creationtimestamp| type| source ---|---|--- 2026-05-03 20:28:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116512528267704627 2026-05-07 05:40:29+00:00| seen| https://gist.github.com/alon710/7e14a0d3fcae150a08d7fce945893208...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
CVE-2026-31431 Copy Fail Detection Tool A comprehensive det...
PT-2026-36908
Name of the Vulnerable Software and Affected Versions Postfix versions prior to 3.8.16 Postfix versions 3.9 prior to 3.9.10 Postfix versions 3.10 prior to 3.10.9 Description A buffer over-read can occur, potentially leading to a process crash, when an enhanced status code is used that lacks text...