bucket-stream

🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...

thedorkbox

thedorkbox TheDorkbox Comprehensive collection of Google Dorks & OSINT techniques to find Confidential Data Welcome to thedorkbox 👋 This is an OSINT tool which consists of various Google dorks embedded into HTML template so that non-technical users get the importance of OSINT techniques and how...

Linux Distros Unpatched Vulnerability : CVE-2026-123877

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter...

UBUNTU-CVE-2026-123877

A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...

nodejs: nodejs: Certificate validation bypass via TLS session cache reuse

A flaw was found in Node.js. When managing outbound HTTPS connections, the client connection agent generates identical session-cache keys for requests with differing Certificate Authority CA trust configurations. Consequently, an existing Transport Layer Security TLS session established under a...

nodejs: nodejs: Certificate validation bypass via TLS session cache reuse

A flaw was found in Node.js. When managing outbound HTTPS connections, the client connection agent generates identical session-cache keys for requests with differing Certificate Authority CA trust configurations. Consequently, an existing Transport Layer Security TLS session established under a...

CVE-2026-123877

A flaw was found in Node.js. When managing outbound HTTPS connections, the client connection agent generates identical session-cache keys for requests with differing Certificate Authority CA trust configurations. Consequently, an existing Transport Layer Security TLS session established under a...

DEBIAN-CVE-2026-123877

A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...

CVE-2026-123877

A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...

ALPINE-CVE-2026-123877

A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...

CVE-2026-123877

A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...

PT-2026-145424

A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...

CVE-2026-123877: nodejs node: A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be…

A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be reused by a later request with a stricter policy. https.Agent.prototype.getName assigns the same Agent and session-cache key to a request that omits ca and one that explicitly...

CVE-2026-54146

A flaw was found in OpenHuman. The desktop process exposes sensitive authentication tokens in its process environment, allowing other local processes running under the same user account to inspect and capture them. A local attacker can exploit this flaw to authenticate to the core service with th...

CVE-2026-55598 PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)

PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user can subscribe to an attacker-controlled RSS feed through POST /api/data/addpodcast in rust-api/src/handlers/podcasts.rs. getpodcastvalues and addepisodes in rust-api/src/database.r...

EUVD-2026-114370

PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user can subscribe to an attacker-controlled RSS feed through POST /api/data/addpodcast in rust-api/src/handlers/podcasts.rs. getpodcastvalues and addepisodes in rust-api/src/database.r...

CVE-2026-55598 PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)

PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user can subscribe to an attacker-controlled RSS feed through POST /api/data/addpodcast in rust-api/src/handlers/podcasts.rs. getpodcastvalues and addepisodes in rust-api/src/database.r...

CVE-2026-55598 PinePods: Authenticated SSRF via podcast RSS enclosure URL (server-side fetch of attacker-controlled URL, no host validation)

PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user can subscribe to an attacker-controlled RSS feed through POST /api/data/addpodcast in rust-api/src/handlers/podcasts.rs. getpodcastvalues and addepisodes in rust-api/src/database.r...

CVE-2026-55598

The PinePods podcast management system (prior to version 0.9.0 ) is vulnerable to Server-Side Request Forgery (SSRF) . An authenticated user can subscribe to a malicious RSS feed via POST /api/data/add_podcast, causing the system to parse and store values without host or IP validation. When down...

CVE-2026-55598: madeofpendletonwool PinePods: PinePods is a complete, self-hosted podcast management system written in Rust

PinePods is a complete, self-hosted podcast management system written in Rust. Prior to 0.9.0, an authenticated user can subscribe to an attacker-controlled RSS feed through POST /api/data/addpodcast in rust-api/src/handlers/podcasts.rs. getpodcastvalues and addepisodes in rust-api/src/database.r...