Malicious code in wix-reg-poc-bypass (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b0b4a2bb63a48ca7c9f712068de893526ec0e3515ffd367f37b5c251034965a The package shadows internal Wix registry module names thunderboltRegistry, corvidRegistry, editorRegistry, siteAssetsRegistry, and others and ships ...

CVE-2023-28218

CVE-2023-28218 보고서 버그 개요 Windows 커널에서 권한 상승으로 이어지는 버그입니다. 버그는 Windows Ancrillary Function Driver for WinSock AFD.sys 드라이버에서 발생합니다. 이 버그는 2023년 4월 11일 패치에서 릴리스되었습니다. CVSS:3.1 7.0 / 6.1 점수를 가지며 Important로 평가됩니다. 버그 설명 버그 유형: Double fetch 및 Integer overflow로 인한 pool overflow. 버그는...

anubis-fetch

anubis-fetch $ nix run github:fzakaria/anubis-fetch -- --text https://lore.kernel.org/ Anubis 작업증명proof-of-work 챌린지 뒤에 있는 URL을 가져오기 위한 Go CLI입니다. 레거시 SHA-256 및 WASM 챌린지를 프로세스 내에서 해결하며, 헤드리스 Chromium을 폴백으로 사용합니다. lore.kernel.org 및 kernel.org와 같은 사이트는 페이지를 제공하기 전에 작업증명을 요구하기 위해 Anubis를 사용합니다. 일반 HT...

CVE-2026-107362

The Malcolm file-upload component is vulnerable to a Server-Side Request Forgery (SSRF) due to its inclusion of the upstream FilePond PHP server (pqina/filepond-server-php) with largely unmodified files. Specifically, the upstream index.php contains a fetch API route that uses curl (with FOLLOWLO...

CVE-2026-107362 Server-Side Request Forgery in Malcolm

Malcolm file-upload component ships the upstream FilePond PHP server pqina/filepond-server-php largely unmodified: Dockerfile copies all upstream .php files and Malcolm only overwrites config.php and submit.php. Upstream index.php exposes a fetch API route that instructs the server to download an...

CVE-2026-21636

CVE-2026-21636 - Node.js 権限モデルの UDS/ネットワークバイパス 脆弱性の概要 Node.js の権限モデル （--permission）は、ファイルシステム、子プロセス、ワーカー、ネットワークへのアクセスを制限することでプロセスをサンドボックス化するように設計されています。CVE-2026-21636 は、undici/fetch（および net/tls）を介してUnix ドメインソケット とローカル TCP アドレスに対して行われる接続が、--allow-net が指定されていない場合でもネットワークガードを完全にバイパスすることを明らかにしています。...

halo-cve-2026-67919

URL からの halo プラグイン RCE halo のコンソールでは、管理者が URL を貼り付けてプラグインをインストール/アップグレードできます。 任意の URL をフェッチし、jar をインストールして、その jar のコードがサーバー上で実行されます。 スキームのチェックもホストのチェックもなく、リダイレクトも追跡され、 プラグインマネージャーは jar から拡張クラスを直接ロードします。 これは CVE-2026-67919（install-from-uri / upgrade-from-uri）、 CVE-2026-67920（migration...

CVE-2026-5061

CVE-2026-5061 Consul Template は、テンプレート評価時にシンボリックリンクが指す先を検証していましたが、その後の依存関係の取得では元のパスを読み取っていました。それらの操作の間にリンクを張り替えることで、サンドボックス内のファイル参照がサンドボックス外のファイル開示に変わってしまいました。 はじめに 私は HashiCorp Consul Template をレビューしているときに、非常に具体的なセキュリティ上の疑問を抱いてこの問題を発見しました： テンプレート評価中にsandboxpath...

CVE-2026-107581

Progressive Robot hMailServer 6.0.0 through 6.3.5 processes several IMAP commands from a signed-in account in time quadratic in the command's length or in the number of elements it names, and can be made to hold memory out of proportion to a command. The FETCH data-item parser normalised a BODY...

Triple_fetch

triplefetch - ianbeer https://bugs.chromium.org/p/project-zero/issues/detail?id=1247 이것은 CVE-2017-7047에 대한 익스플로잇입니다. libxpc의 논리 오류로 인해 악의적인 메시지 발신자가 공유 메모리로 백업된 xpcdata 객체를 보낼 수 있었습니다. xpc 메시지의 소비자들은 xpcdata 객체의 백업 버퍼가 수신자에 의해 처리되는 동안 발신자에 의해 수정될 수 있다고 예상하지 못한 것으로 보입니다. 이 프로젝트는 CVE-2017-7047을 악용하...

EUVD-2026-94863

Progressive Robot hMailServer 6.0.0 through 6.3.5 processes several IMAP commands from a signed-in account in time quadratic in the command's length or in the number of elements it names, and can be made to hold memory out of proportion to a command. The FETCH data-item parser normalised a BODY...

CVE-2026-107581 Inefficient Algorithmic Complexity in hMailServer

Progressive Robot hMailServer 6.0.0 through 6.3.5 processes several IMAP commands from a signed-in account in time quadratic in the command's length or in the number of elements it names, and can be made to hold memory out of proportion to a command. The FETCH data-item parser normalised a BODY...

CVE-2026-107581

Progressive Robot hMailServer versions 6.0.0 through 6.3.5 are vulnerable to Inefficient Algorithmic Complexity (CWE-407) and Excessive Memory Consumption (CWE-400) via IMAP commands. The vulnerability stems from several issues: the FETCH data-item parser uses a case-insensitive string replacemen...

CVE-2026-103649

Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery denial of service. The server set its socket timeouts in the form Windows takes, which Linux refuses, an...

EUVD-2026-94835

Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery denial of service. The server set its socket timeouts in the form Windows takes, which Linux refuses, an...

CVE-2026-103649

Linux builds of Progressive Robot hMailServer versions 6.3.0 through 6.3.5 are vulnerable to a denial of service (DoS) due to missing network timeouts. The root cause is that the server sets socket timeouts in a Windows-specific format which Linux rejects, causing HTTPS clients to read without a ...

CVE-2026-103649 Synchronous Access of Remote Resource without Timeout in hMailServer

Missing network timeouts in the Linux builds of Progressive Robot hMailServer 6.3.0 through 6.3.5 allow a remote attacker to hold server threads indefinitely and so stop outbound mail delivery denial of service. The server set its socket timeouts in the form Windows takes, which Linux refuses, an...

r4ven

If you find this GitHub repo useful, please consider giving it a star! ⭐️ ▶️ Watch Video - How To Use! This project is a security research and awareness tool designed to demonstrate how modern web browsers may expose location data, camera access, IP address, and device information when users...

domdig

DOMDig DOMDig is a DOM XSS scanner that runs inside the Chromium web browser and it can scan single page applications SPA recursively. Unlike other scanners, DOMDig can crawl any webapplication including gmail by keeping track of DOM modifications and XHR/fetch/websocket requests and it can...

Bifrost < 1.6.3 - Unauthenticated Remote Plugin URL Fetch

When dashboard authentication is disabled, Bifrost accepts an enabled custom plugin with an HTTP URL as its path. The gateway fetches the URL before attempting to load it. This template confirms the unauthenticated server-side request with an out-of-band callback; it does not assert code executio...