FeedInfrastructure Security

Verified advisories, vulnerability disclosures, and architectural research.

CVE-2020-3433

CVE-2020-3433: Critical DLL Hijacking in Cisco AnyConnect Secure Mobility Client

Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges.

AnyConnect Secure Mobility Client

View Detail

CVE-2023-46747

CVE-2023-46747: Critical F5 BIG-IP Authentication Bypass and RCE Vulnerability Advisory

F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46748.

BIG-IP Configuration Utility

View Detail

CVE-2026-34197

CVE-2026-34197: Critical Code Injection in Apache ActiveMQ via Jolokia JMX Bridge

Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection.

ActiveMQ

View Detail