93 matches found
CVE-2000-0649
CVE-2000-0649 CVE-2000-0649는 서버의 내부 IP 주소를 잠재적으로 노출할 수 있는 낮은 위험도의 취약점입니다. 공식 세부 정보는 다음과 같습니다: Rapid7 CVE NIST 이 특정 취약점은 현재 NGINX와 일부 Apache 설정에도 영향을 미치는 것으로 보이기 때문에 제 관심을 끌었습니다. 이 도구는 주어진 IP 또는 도메인에서 취약점을 테스트하며, 다른 스크립트와 함께 사용할 수 있도록 의도적으로 출력을 가볍게 유지합니다. 작동할 때는 다음과 같이 표시됩니다: 그렇지 않으면 출력이 없습니다. 우리는...
Remote-Integer-Overflow-Vulnerability
Nginx : Remote-Integer-Overflow-Vulnerability 이 저장소는 "Remote Integer Overflow Vulnerability CVE-2017-7529"라는 오래되었지만 여전히 존재하는 Nginx 취약점을 다룹니다. 이 취약점은 구형 Nginx 서버1.13에 해당됩니다. Nginx 1.12는 예외 설정 : sys 라이브러리와 requests 라이브러리를 다운로드하세요. os 라이브러리도 있으면 더 좋습니다. 악용 가능한 취약점은 다음과 같습니다 :- 1 Reading Sensitive...
MAL-2026-17437 Malicious code in @bluewin/utils (npm)
@bluewin/utils is a dependency-confusion package: it describes itself as a "PoC package for dependency confusion testing" and claims the @bluewin scope, so a build that resolves that scope from the public registry runs its code instead of the intended private package. Its postinstall script runs...
CVE-2026-76203
Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HTTP requests from other users' browsers, disclosing their IP address and User-Agent, via CSS hex escapes that...
CVE-2026-76203 CSS sanitizer bypass in Pentestify report themes allows forced outbound requests
Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HTTP requests from other users' browsers, disclosing their IP address and User-Agent, via CSS hex escapes that...
EUVD-2026-62416
Incorrect Behavior Order: Validate Before Canonicalize in the report theme CSS sanitizer in maalfer Pentestify 1.2.0 through 2.3.2 allows an authenticated user to force outbound HTTP requests from other users' browsers, disclosing their IP address and User-Agent, via CSS hex escapes that...
EUVD-2026-45194
Dendrite through 0.13.8 contains a server-side request forgery vulnerability that allows unauthenticated attackers to cause the server to open outbound TLS connections to arbitrary hosts and ports by supplying an unvalidated serverName parameter to the legacy media download endpoint. Attackers ca...
CVE-2026-35142
HCL DFXAnalytics is affected by an Internal IP Address Disclosure vulnerability. The application includes internal IP address details within its generated server responses, which could allow a remote attacker to gather sensitive network topology information and use it to map the internal...
CVE-2026-42447
jadx is a Dex to Java decompiler. Prior to 1.5.6, jadx-gui is affected by an HTML injection vulnerability in the Summary tab because SummaryNode.java appends arches and perArchCount values derived from .so file path components inside an APK into an HTML panel without escaping. A malicious APK wit...
CVE-2026-33357
CVE-2026-33357 affects Meari client applications that embed com.meari.sdk, including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label
CVE-2026-45182
GrapheneOS before 2026050400 allows attackers to discover the real IP address of a VPN user as a consequence of a registerQuicConnectionClosePayload optimization, because an application can let systemserver transmit UDP traffic on its behalf. This occurs when the "Block connections without VPN" a...
CVE-2025-55276
HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability will give attackers a clearer map of the organization’s network layout...
CVE-2025-55276 HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability
HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability will give attackers a clearer map of the organization’s network layout...
CVE-2025-55276: Exposure of Sensitive Information to an Unauthorized Actor
HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability will give attackers a clearer map of the organization’s network layout...
EUVD-2019-17552
Malware in sbrugna...
EUVD-2018-18355
Malware in sbrugna...
EUVD-2018-5309
Malware in sbrugna...
EUVD-2022-7407
Malicious code in bioql PyPI...