1264 matches found
nmap
Nmap Nmap is released under a custom license, which is based on but not compatible with GPLv2. The Nmap license allows free usage by end users, and we also offer a commercial license for companies that wish to redistribute Nmap technology with their products. See Nmap Copyright and Licensing for...
hardcidr
hardCIDR Background A Linux Bash script to discover the netblocks, or ranges, in CIDR notation owned by the target organization during the intelligence gathering phase of a penetration test. This information is maintained by the five Regional Internet Registries RIRs: ARIN North America RIPE...
nodesub
NODESUB Nodesub is a command-line tool for finding subdomains in bug bounty programs. It supports various subdomain enumeration techniques and provides flexible options for customization. Features Perform subdomain enumeration using CIDR notation Support input list. Perform subdomain enumeration...
heartbleedscanner
Heartbleed Scanner Network Scanner for OpenSSL Memory Leak CVE-2014-0160 -t parameter to optimize the timeout in seconds. -f parameter to log the memleak of vulnerable systems. -n parameter to scan entire network. -i parameter to scan from a list file. Useful if you already have targets. -r...
CVE-2026-101899
A flaw was found in Axios. This vulnerability allows information disclosure when network traffic intended to bypass a proxy is improperly routed through it. Axios fails to parse Classless Inter-Domain Routing CIDR notation in proxy bypass lists as IP address ranges, treating them as plain text...
axios: Axios: Information disclosure via improper CIDR proxy bypass handling
A flaw was found in Axios. This vulnerability allows information disclosure when network traffic intended to bypass a proxy is improperly routed through it. Axios fails to parse Classless Inter-Domain Routing CIDR notation in proxy bypass lists as IP address ranges, treating them as plain text...
axios: Axios: Information disclosure via improper CIDR proxy bypass handling
A flaw was found in Axios. This vulnerability allows information disclosure when network traffic intended to bypass a proxy is improperly routed through it. Axios fails to parse Classless Inter-Domain Routing CIDR notation in proxy bypass lists as IP address ranges, treating them as plain text...
Astra Linux – Vulnerability in libjettison-java
A stack overflow in Jettison prior to v1.5.2 allowed attackers to cause a Denial of Service DoS attack through crafted JSON data...
Astra Linux – Vulnerability in libfastjson
JSON-C version 0.14 has an integer overflow issue, and there is a risk of out-of-bounds write operations through a large JSON file, as demonstrated by the printbufmemappend function...
GO-2026-6499 vulnerabilities
Vulnerabilities for packages: maru, flux-helm-controller, manifest-tool, helm-mapkubeapis, opentofu, helm-push, kyverno-notation-aws, k9s, helm-set-status, kube-arangodb, tigera-operator, cert-manager-cmctl, k8sgpt, kargo, xeol, rancher-helm, cluster-api-helm-controller, gitness...
GO-2026-6497 vulnerabilities
Vulnerabilities for packages: maru, flux-helm-controller, manifest-tool, helm-mapkubeapis, opentofu, helm-push, kyverno-notation-aws, k9s, helm-set-status, kube-arangodb, tigera-operator, cert-manager-cmctl, k8sgpt, kargo, xeol, rancher-helm, cluster-api-helm-controller, gitness...
Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges
Summary Axios supports proxy environment variables and evaluates NOPROXY exclusions in the Node.js adapter. CIDR-form NOPROXY entries such as 127.0.0.0/8, 10.0.0.0/8, or 169.254.169.254/32 are not interpreted as IP ranges. As a result, a request to an IP address inside a configured CIDR exclusion...
GHSA-44G4-M2MJ-WPVX Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges
Summary Axios supports proxy environment variables and evaluates NOPROXY exclusions in the Node.js adapter. CIDR-form NOPROXY entries such as 127.0.0.0/8, 10.0.0.0/8, or 169.254.169.254/32 are not interpreted as IP ranges. As a result, a request to an IP address inside a configured CIDR exclusion...
Improper Isolation or Compartmentalization
Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization in lib/helpers/shouldBypassProxy.js, which matches NOPROXY entries by exact host or IP and has no parsing for CIDR notation, so...
Improper Isolation or Compartmentalization
Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization in lib/helpers/shouldBypassProxy.js, which matches NOPROXY entries by exact host or IP and has no parsing for...
PT-2026-103485
Name of the Vulnerable Software and Affected Versions Axios versions 1.15.0 through 1.19.x Description In the Node.js adapter, the software fails to correctly interpret CIDR notation e.g., 127.0.0.0/8 within the NO PROXY environment variable. Instead of evaluating these as network ranges, the...
CVE-2026-100670
Grav CMS 2.0.14 through 2.0.24 contains a privilege escalation vulnerability in the group and account blueprints. The access map is gated by a security@: admin.super guard that is resolved by the field's exact path, so a submitted flat dot-notation key such as access.admin.super instead of the...
EUVD-2026-65212
Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered by configdeniedpaths...
Astra Linux – Vulnerability in Python-Django
A issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter consumes significant memory when dealing with a string representation of a number in scientific notation with a large exponent...