Lucene search
+L

13478 matches found

Github Security Blog
Github Security Blog
•added 2026/01/16 3:31 p.m.•31 views

Nu Html Checker (vnu) contains a Server-Side Request Forgery (SSRF) vulnerability

Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...

6.9CVSS6.1AI score0.00465EPSS
SaveExploits1References4Affected Software2
osv_ghsa
osv_ghsa
•added 2026/01/16 3:31 p.m.•15 views

GHSA-FCCG-7W3P-W66F Nu Html Checker (vnu) contains a Server-Side Request Forgery (SSRF) vulnerability

Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...

6.9CVSS6.1AI score0.00465EPSS
SaveExploits1References3
Snyk
Snyk
•added 2026/01/16 2:51 p.m.•13 views

Server-side Request Forgery (SSRF)

Overview nu.validator:validator is an A library of string validators and sanitizers. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF due to the improper implementation of localhost bypass protection. An attacker can cause the server to initiate arbitrary HTTP ...

6.9CVSS6AI score0.00465EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/01/16 2:51 p.m.•9 views

Server-side Request Forgery (SSRF)

Overview vnu-jar is a Provides the Nu Html Checker «vnu.jar» file Affected versions of this package are vulnerable to Server-side Request Forgery SSRF due to the improper implementation of localhost bypass protection. An attacker can cause the server to initiate arbitrary HTTP or HTTPS requests t...

6.9CVSS6AI score0.00465EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/01/16 2:51 p.m.•10 views

Server-side Request Forgery (SSRF)

Overview html5validator is a Validate HTML5 files. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF due to the improper implementation of localhost bypass protection. An attacker can cause the server to initiate arbitrary HTTP or HTTPS requests to internal...

6.9CVSS6AI score0.00465EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2026/01/16 2:23 p.m.•26 views

CVE-2026-22917

Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service...

7.5CVSS5.8AI score0.00553EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/01/16 2:15 p.m.•31 views

DEBIAN-CVE-2025-15104

Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...

5.3CVSS6.1AI score0.00465EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2026/01/16 2:15 p.m.•19 views

CVE-2025-15104

Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...

5.3CVSS6.1AI score0.00465EPSS
SaveExploits1References2
NVD
NVD
•added 2026/01/16 2:15 p.m.•25 views

CVE-2025-15104

Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...

6.9CVSS0.00465EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2026/01/16 2:15 p.m.•12 views

CVE-2025-15104

Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...

6.9CVSS6.1AI score0.00465EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2026/01/16 2:15 p.m.•3 views

UBUNTU-CVE-2025-15104

Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...

6.9CVSS6.1AI score0.00465EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/01/16 2:00 p.m.•11 views

CVE-2025-15104

Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...

6.9CVSS6.2AI score0.00465EPSS
SaveExploits1References3
Mend
Mend
•added 2026/01/16 2:00 p.m.•9 views

CVE-2025-15104

Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...

6.9CVSS6.1AI score0.00465EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/01/16 2:00 p.m.•52 views

CVE-2025-15104 Nu Html Checker (validator.nu) - Restriction bypass vulnerability allowing local SSRF

Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...

6.9CVSS0.00465EPSS
SaveExploits1References2
CVE
CVE
•added 2026/01/16 2:00 p.m.•98 views

CVE-2025-15104

Nu Html Checker (validator.nu) — SSRF via restriction bypass in vnu (latest commit 23f090a11bab8d0d4e698f1ffc197a4fe226a9cd). The issue allows remote attackers to induce the server to make arbitrary HTTP/HTTPS requests to internal resources, including localhost services. Protective hostname check...

6.9CVSS6.1AI score0.00465EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2026/01/16 2:00 p.m.•25 views

CVE-2025-15104

Nu Html Checker validator.nu contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access to localhost and...

6.9CVSS6.1AI score0.00465EPSS
SaveExploits1
osv_bit
osv_bit
•added 2026/01/16 8:42 a.m.•26 views

BIT-KIBANA-2026-0530 Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation

Allocation of Resources Without Limits or Throttling CWE-770 in Kibana Fleet can lead to Excessive Allocation CAPEC-130 via a specially crafted request. This causes the application to perform redundant processing operations that continuously consume system resources until service degradation or...

6.5CVSS5.9AI score0.00325EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/01/16 12:00 a.m.•20 views

The Nu Html Checker security vulnerability

The Nu Html Checker is an open-source tool developed by The Nu Html Checker vnu that verifies whether HTML documents comply with modern web standards. The Nu Html Checker has a security vulnerability, which stems from a limitation that can be bypassed. This vulnerability could allow remote...

6.9CVSS6.1AI score0.00465EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/01/16 12:00 a.m.•19 views

PT-2026-3253

Name of the Vulnerable Software and Affected Versions Nu Html Checker versions prior to commit 23f090a11bab8d0d4e698f1ffc197a4fe226a9cd Description The Nu Html Checker validator.nu is susceptible to a restriction bypass that enables remote attackers to initiate arbitrary HTTP/HTTPS requests to...

6.9CVSS6.2AI score0.00465EPSS
SaveExploits1References11
BDU FSTEC
BDU FSTEC
•added 2026/01/16 12:00 a.m.•19 views

Windows Ancillary Function Driver Privilege Escalation

The vulnerability of the Windows Ancillary Function Driver for WinSock operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS6.5AI score0.003EPSS
SaveExploits0References2Affected Software24
Rows per page
Query Builder