Lucene search
+L

49 matches found

OSV
OSV
added 2026/09/22 6:04 p.m.6 views

RLSA-2026:69126 Important: curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: libcurl: Unauthorized connection reuse due to a logical error CVE-2026-8458 curl: Information disclosure due to...

8.1CVSS5.9AI score0.005EPSS
SaveExploits2References4
Rockylinux
Rockylinux
added 2026/09/22 6:04 p.m.14 views

curl security update

An update is available for curl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for downloadi...

5.9AI score0.005EPSS
SaveExploits2
RedHat Linux
RedHat Linux
added 2026/09/21 7:37 a.m.6 views

Important: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

6.1AI score0.00688EPSS
SaveExploits7References7
AlmaLinux
AlmaLinux
added 2026/09/21 12:00 a.m.5 views

Important: curl security update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: libcurl: Unauthorized connection reuse due to a logical error CVE-2026-8458 curl: Information disclosure due to...

5.9AI score0.005EPSS
SaveExploits2References6
Kitploit
Kitploit
added 2026/09/17 11:52 p.m.11 views

CVE-2025-36041

CVE-2025-36041 IBM MQ SSL 绕过利用工具 概述 本仓库包含针对 CVE-2025-36041 的概念验证(PoC)利用代码,该漏洞存在于 IBM MQ(消息队列)中,允许绕过 SSL 证书验证。通过注入伪造的 SSL 证书并使用定制的 MQCONNX 参数,可以建立未经授权的客户端与 IBM MQ 服务器的连接。 功能 SSL 绕过 :注入伪造的 SSL KeyRepository 以禁用服务器证书验证。 自动化利用 :打开指定队列并发送测试消息("Hello MQ")以确认利用成功。 可定制 :通过命令行参数指定目标队列管理器、队列名称以及伪造 SSL 仓库的路...

9.8CVSS5.9AI score0.00355EPSS
SaveExploits1
CNVD
CNVD
added 2026/02/05 12:00 a.m.29 views

OpenClaw has an unspecified vulnerability

OpenClaw is openclaw open source an intelligent artificial assistant. A security vulnerability exists in versions prior to OpenClaw 2026.1.29, which originates from automatically establishing a WebSocket connection and sending a token, and can be exploited by an attacker to cause an unauthorized...

8.8CVSS5.8AI score0.2412EPSS
SaveExploits7References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2023-49453

Malicious code in bioql PyPI...

3.6CVSS4.7AI score0.0044EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2025-6711

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00413EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/07/25 12:00 a.m.13 views

NewStart CGSL MAIN 7.02 : bluez Vulnerability (NS-SA-2025-0149)

The remote NewStart CGSL host, running version MAIN 7.02, has bluez packages installed that are affected by a vulnerability: - Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports,...

7.1CVSS6.9AI score0.07879EPSS
SaveExploits9References3
GithubExploit
GithubExploit
added 2025/06/19 10:44 p.m.437 views

Exploit for Improper Certificate Validation in Ibm Mq_Operator

CVE-2025-36041 IBM MQ SSL Bypass Exploit Overview This re...

9.8CVSS9.1AI score0.00355EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 3:21 a.m.14 views

CVE-2023-24459

A missing permission check in Jenkins BearyChat Plugin 3.0.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...

6.5CVSS6.5AI score0.00717EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:06 a.m.18 views

CVE-2022-28144

Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified host using attacker-specified username and password perform a connection test, disable SSL/TLS validation for...

7.5CVSS6.4AI score0.00822EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/28 12:00 a.m.27 views

CVE-2024-55968

An issue was discovered in DTEX DEC-M DTEX Forwarder 6.1.1. The com.dtexsystems.helper service, responsible for handling privileged operations within the macOS DTEX Event Forwarder agent, fails to implement critical client validation during XPC interprocess communication IPC. Specifically, the...

0.01016EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2025/01/22 10:42 a.m.10 views

redis: possible bypass of Unix socket permissions on startup

A flaw was found in Redis, an in-memory database that persists on disk. On startup, Redis listens on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, anothe...

3.6CVSS7.1AI score0.0044EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/01/17 9:22 p.m.30 views

AWS Cloud Development Kit (AWS CDK) IAM OIDC custom resource allows connection to unauthorized OIDC provider

Impact Users who use IAM OIDC custom resource provider package will download CA Thumbprints as part of the custom resource workflow, https://github.com/aws/aws-cdk/blob/d16482fc8a4a3e1f62751f481b770c09034df7d2/packages/%40aws-cdk/custom-resource-handlers/lib/aws-iam/oidc-handler/external.tsL34...

8.1CVSS7AI score0.00327EPSS
SaveExploits0References9Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/17 8:34 p.m.9 views

CVE-2025-23206 IAM OIDC custom resource allows connection to unauthorized OIDC provider in aws-cdk

The AWS Cloud Development Kit AWS CDK is an open-source software development framework to define cloud infrastructure in code and provision it through AWS CloudFormation. Users who use IAM OIDC custom resource provider package will download CA Thumbprints as part of the custom resource workflow...

1.8CVSS7.2AI score0.00327EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2024/12/05 9:45 p.m.23 views

redis: possible bypass of Unix socket permissions on startup

A flaw was found in Redis, an in-memory database that persists on disk. On startup, Redis listens on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, anothe...

3.6CVSS7.1AI score0.0044EPSS
SaveExploits0References5
Redos
Redos
added 2024/09/16 12:00 a.m.22 views

ROS-20240916-08

Vulnerability of MongoDB database management system is related to errors in TLS certificate validation procedure. of TLS certificate authentication. Exploitation of the vulnerability could allow an attacker acting remotely, establish an unauthorized connection to the MongoDB server...

9.8CVSS7.1AI score0.005EPSS
SaveExploits0
OSV
OSV
added 2024/08/22 7:40 p.m.34 views

BIT-VALKEY-2023-45145 Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask2 is used, this creates a race condition that enables, during a short period of time, another process...

3.6CVSS5.5AI score0.0044EPSS
SaveExploits0References8
Hacker One
Hacker One
added 2024/08/06 3:09 p.m.22 views

Sony: 明確な認証不備および潜在的な中間者攻撃の可能性(Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks)

The WH-1000XM5 headphones were found to have an authentication vulnerability that allowed an attacker to connect to the device without going through the proper pairing process. This vulnerability could be combined with existing Bluetooth attacks to enable man-in-the-middle attacks...

7.2AI score
SaveExploits0
Rows per page
Query Builder