139 matches found
MINI-PHPC-8WC3-JHMX
Bulletin has no description...
MINI-XF25-2926-3C7J
Bulletin has no description...
MINI-GXCW-2F9H-Q89X
Bulletin has no description...
CVE-2026-19821
creationtimestamp| type| source ---|---|--- 2026-08-14 13:29:19+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mt2bbfjm642h...
CVE-2026-67990
creationtimestamp| type| source ---|---|--- 2026-08-13 04:36:15+00:00| seen| https://gist.github.com/Zykis1024/cec690012eecac53f408e78d2b569f06...
CVE-2026-73405 Authorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookup
An authorization bypass vulnerability in Vulnerability-Lookup allowed inactive or unconfirmed accounts to subscribe to Server-Sent Events SSE streams through the /pubsub/subscribe/ endpoint. The tokenrequired decorator used by the Pub/Sub interface authenticated requests solely by matching the...
CVE-2026-73405 Authorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookup
An authorization bypass vulnerability in Vulnerability-Lookup allowed inactive or unconfirmed accounts to subscribe to Server-Sent Events SSE streams through the /pubsub/subscribe/ endpoint. The tokenrequired decorator used by the Pub/Sub interface authenticated requests solely by matching the...
CVE-2026-73405
CVE-2026-73405 describes an authorization bypass in Vulnerability-Lookup where the Pub/Sub SSE interface allowed unconfirmed/inactive accounts to subscribe to /pubsub/subscribe/ due to token_required only validating the API key, not is_active/is_confirmed. This created a boundary mismatch with th...
BELL-CVE-2026-68118
Bulletin has no description...
CVE-2026-62899
Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...
CVE-2026-72872
creationtimestamp| type| source ---|---|--- 2026-08-10 19:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqtryv6kf2u 2026-08-10 20:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msqvc435em2t 2026-08-11 17:11:40+00:00| seen|...
CVE-2026-72868
creationtimestamp| type| source ---|---|--- 2026-08-10 19:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqtog6fbv25...
CVE-2026-68083
creationtimestamp| type| source ---|---|--- 2026-08-10 12:33:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117071228818236939...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinkqueue: perform a shared-unconfirmed check before segmentation. Ulrich reports a regression with nfqueue: If an application does not set the ‘FGSO’ capability flag, and a gso packet with an unconfirmed nfconn...
Linux Distros Unpatched Vulnerability : CVE-2026-53394
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When findorallocopenstateowner encounters an unconfirmed owner, it calls releaseopenowner...
SUSE CVE-2026-53394
In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When findorallocopenstateowner encounters an unconfirmed owner, it calls releaseopenowner and sets oo = NULL. Control then falls through past the if oo guard -...
CVE-2026-53394
In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When findorallocopenstateowner encounters an unconfirmed owner, it calls releaseopenowner and sets oo = NULL. Control then falls through past the if oo guard -...
CVE-2026-53394 nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race
In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When findorallocopenstateowner encounters an unconfirmed owner, it calls releaseopenowner and sets oo = NULL. Control then falls through past the if oo guard -...
CVE-2026-53394
CVE-2026-53394 describes a Linux kernel vulnerability in nfsd where pre-allocated openowner state is leaked during an unconfirmed retry race. The issue occurs in find_or_alloc_open_stateowner(): if an unconfirmed owner is encountered, the code frees the previous state only partially and then unco...
CVE-2026-53394 nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race
In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When findorallocopenstateowner encounters an unconfirmed owner, it calls releaseopenowner and sets oo = NULL. Control then falls through past the if oo guard -...