5649 matches found
EUVD-2026-72105
h3 versions before 2.0.1-rc.18 contain an open redirect vulnerability in the redirectBack utility that fails to sanitize protocol-relative paths in the Referer header pathname. Attackers can craft a same-origin URL with a double-slash path segment that passes origin validation but produces a...
messari-crack
Messari MSR Crack 2026 Messari ใใฌใใขใ ใใขใณใญใใฏ | ใชใตใผใใใ & ใคใณใใซใใผใฟใใฃใผใใธใฎใขใฏใปใน ่ชฌๆ Messari MSR Crack ใฏใMessari ใฎใใฌใใขใ ใชใตใผใใใใจใคใณใใซใใผใฟใใฃใผใใธใฎใขใฏใปในใใขใณใญใใฏใใใใใซ่จญ่จใใใใใญใใงใใทใงใใซใชใฏใฉใใญใณใฐใฆใผใใฃใชใใฃใงใใๆฉ้ขๆ่ณๅฎถๅใใฎๆๅท้่ฒจใชใตใผใใๅธๅ ดใคใณใใชใธใงใณในใฌใใผใใใชใขใซใฟใคใ ใใผใฟใใฃใผใใธใฎ็กๅถ้ใขใฏใปในใๆไพใใพใใ ไธปใชๅฉ็น โ ใชใตใผใใใใฎใขใณใญใใฏ โ Messari ใฎใใฌใใขใ ใชใตใผใใฉใคใใฉใชใธใฎๅฎๅ จใขใฏใปใน โ ...
parsedmarc v11.0.1
parsedmarc parsedmarc is a Python module and CLI utility for parsing DMARC reports. When used with Elasticsearch and Kibana or Splunk, or with OpenSearch and Grafana, it works as a self-hosted open-source alternative to commercial DMARC report processing services such as Agari Brand Protection,...
CVE-2026-18489
IBM ContextForge MCP Gateway - Translate utility = 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session...
CVE-2026-18489
IBM ContextForge MCP Gateway โ Translate utility (โค 1.0.8) is affected by a cross-client credential context confusion in the Translate service (mcpgateway/translate.py) when the --enable-dynamic-env flag is active. The service maps HTTP request headers (e.g. Authorization) into a shared stdio sub...
EUVD-2026-71604
IBM ContextForge MCP Gateway - Translate utility = 1.0.8 MCP Context Forge could allow a remote attacker to obtain sensitive information from other sessions due to exposure of data elements to the wrong session...
CVE-2026-75161
An issue in the ugw-restart method of /cgi-bin/wwwugw.cgi in MBS-Solutions X-Serie Gateway firmware V60005 allows a remote authenticated user with the low-privileged Standard role to inject arbitrary code into the dpcheck system utility executed as root...
CVE-2026-63020
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the victim's BIG-IP Configuration utility we...
EUVD-2026-70135
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the victim's BIG-IP Configuration utility we...
CVE-2026-63020
CVE-2026-63020 is a CWE-451 (UI Misrepresentation of Critical Information) vulnerability in the BIG-IP Configuration utility web interface. An attacker can trick authenticated users into clicking malicious links, causing a spoofed error message to be reflected in the victim's browser session. Thi...
K000162521: BIG-IP and BIG-IQ Configuration utility vulnerability CVE-2026-66842
Security Advisory Description BIG-IP has a vulnerability where an authenticated user of any role may be able to create administrative user accounts through an undisclosed request to the Configuration utility. CVE-2026-66842 Impact This vulnerability may allow an authenticated attacker with networ...
F5 Networks BIG-IP : BIG-IP Configuration utility vulnerability (K000161728)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.4 / 17.5.1.8 / 21.1.0.1. It is, therefore, affected by a vulnerability as referenced in the K000161728 advisory. A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker ...
F5 Networks BIG-IP : BIG-IP and BIG-IQ Configuration utility vulnerability (K000162521)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.4 / 17.5.1.8 / 21.0.0.3 / 21.1.0.1. It is, therefore, affected by a vulnerability as referenced in the K000162521 advisory. BIG-IP has a vulnerability where an authenticated user of any role may be able to create...
gzip security update
An update is available for gzip. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gzip packages contain the gzip GNU zip data compression utility. gzip is us...
gzip security update
An update is available for gzip. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gzip packages contain the gzip GNU zip data compression utility. gzip is use...
puncia v0.36
PantheraP.uncia Official CLI utility for Subdomain Center & Exploit Observer Puncia is the official command-line client for two A.R.P. Syndicate intelligence APIs โ point it at a domain, a brand, or a vulnerability ID and get structured JSON back in seconds, no browser required: ๐ธ๏ธ Subdomain Cente...
RockyLinux 10 : gzip (RLSA-2026:61625)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61625 advisory. gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility CVE-2026-41991 gzip: gzip: Information disclosure via global...
CVE-2026-73819
The affected Ebyte product's vendor configuration utility permits access to administrative functions without verifying the operator's identity under certain credential conditions. An unauthenticated attacker on the adjacent network could modify critical settings or change access credentials,...
Moderate: Red Hat Security Advisory: gzip security update
An update for gzip is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility
A flaw was found in the gzexe utility of GNU gzip. When the mktemp utility is not available, gzexe creates temporary files with predictable names based on the process ID. A local attacker can exploit this by pre-creating a symbolic link to an arbitrary file at the predicted temporary file path...