143 matches found
CVE-2026-54203
The CVE describes a memory leak in Tobit Laboratories AG TeamDavid’s Webbox. The vulnerability is triggered by accessing the endpoint /.well-known/mta-sts, allowing an unauthenticated attacker to repeatedly request the URL and potentially read sensitive information (including user passwords). It ...
CVE-2026-54203 TeamDavid: Memory Leak leaking sensitive information
Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows reading of sensitive information. When accessing the URL “/.well-known/mta-sts.”, the application responds with memory. By repeatedly requesting this endpoint, an attacker can access sensitive...
CVE-2026-54203 TeamDavid: Memory Leak leaking sensitive information
Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratories AG TeamDavid's Webbox allows reading of sensitive information. When accessing the URL “/.well-known/mta-sts.”, the application responds with memory. By repeatedly requesting this endpoint, an attacker can access sensitive...
GHSA-W8RR-5GCM-PP58 vulnerabilities
Vulnerabilities for packages: cilium-fips, tkn, knative-kafka-broker-fips, flux, opentofu, terraform-mcp-server, datadog-agent, cg, cilium, containerd, fleet-server, aactl, kube-logging-operator-fips, knative-operator, terragrunt, terragrunt-fips, tkn-fips, docker-cli-buildx, prometheus,...
CVE-2026-39882 vulnerabilities
Vulnerabilities for packages: cilium-fips, tkn, knative-kafka-broker-fips, flux, opentofu, terraform-mcp-server, datadog-agent, cg, cilium, containerd, fleet-server, aactl, kube-logging-operator-fips, knative-operator, terragrunt, terragrunt-fips, tkn-fips, docker-cli-buildx, prometheus,...
BIT-MINIO-2026-33419 MinIO: LDAP login brute-force via user enumeration and missing rate limit
MinIO is a high-performance object storage system. Prior to 2026.03.17, MinIO AIStor's STS Security Token Service AssumeRoleWithLDAPIdentity endpoint is vulnerable to LDAP credential brute-forcing due to two combined weaknesses: 1 distinguishable error responses that enable username enumeration,...
CVE-2026-33419
MinIO AIStor STS endpoint AssumeRoleWithLDAPIdentity is vulnerable to LDAP credential brute-forcing due to username enumeration via distinguishable error responses and no rate limiting. An unauthenticated attacker can enumerate LDAP usernames and perform unlimited password guesses to obtain tempo...
GHSA-JV87-32HW-HH99 MinIO LDAP login brute-force via user enumeration and missing rate limit
Impact What kind of vulnerability is it? Who is impacted? MinIO AIStor's STS Security Token Service AssumeRoleWithLDAPIdentity endpoint is vulnerable to LDAP credential brute-forcing due to two combined weaknesses: 1 distinguishable error responses that enable username enumeration, and 2 absence ...
CVE-2026-23759
Perle IOLAN STS/SCS terminal server models with firmware versions prior to 6.0 allow authenticated OS command injection via the restricted shell accessed over Telnet or SSH. The shell 'ps' command does not perform proper argument sanitization and passes user-supplied parameters into an 'sh -c'...
CVE-2026-23759
Perle IOLAN STS/SCS terminal server models with firmware versions prior to 6.0 allow authenticated OS command injection via the restricted shell accessed over Telnet or SSH. The shell 'ps' command does not perform proper argument sanitization and passes user-supplied parameters into an 'sh -c'...
CVE-2026-23759
CVE-2026-23759 affects Perle IOLAN STS/SCS terminal server models with firmware earlier than 6.0. The issue is an authenticated OS command injection via the restricted shell accessed over Telnet or SSH. The shell's handling of the ps subcommand does not sanitize arguments, passing user-supplied p...
CVE-2019-16791
In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy...
Exploit for CVE-2025-62506
CVE-2025-62506 Vulnerability Verification Script !中文https...
EUVD-2020-0149
Malware in sbrugna...
EUVD-2018-11648
Malware in sbrugna...
SUSE CVE-2025-52477
Octo-STS is a GitHub App that acts like a Security Token Service STS for the GitHub API. Octo-STS versions before v0.5.3 are vulnerable to unauthenticated SSRF by abusing fields in OpenID Connect tokens. Malicious tokens were shown to trigger internal network requests which could reflect error lo...
GO-2025-3779 Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app...
GHSA-H3QP-HWVR-9XCQ vulnerabilities
Vulnerabilities for packages: octo-sts...