Mastodon Prototype Pollution Vulnerability

The GitHub repository mastodon/mastodon prior to 3.5.0 contains a Prototype Pollution vulnerability. id: CVE-2022-0432 info: name: Mastodon Prototype Pollution Vulnerability author: pikpikcu severity: medium description: The GitHub repository mastodon/mastodon prior to 3.5.0 contains a Prototype...

Mastodon - Open Redirect

Mastodon version 4.5.8, 4.4.15, 4.3.21 is vulnerable to unauthenticated Open Redirect vulnerability CWE-601 exists in the /web/ route due to improper handling of URL-encoded path segments. id: CVE-2026-33868 info: name: Mastodon - Open Redirect author: theamanrawat severity: medium description: |...

REC2

:shipit: 信息： REC2 是一个较早的个人项目（ 2023 年初 ），我没有继续开发它。它是我用来学习 Rust 的一系列项目之一。代码可能被认为已过时且并非最佳形态。也许我会从 roadmap 继续我之前的工作。不过，REC2 功能完备 ，能够通过 VirusTotal 和 Mastodon API 在 Linux / macOS 或 Windows 目标上执行命令。 REC2 Rusty External C2 ⚠️ 免责声明 ： REC2 仅用于教育目的。请自行斟酌使用，我对任何造成的损害概不负责。...

CVE-2026-Mastodon-Streaming-CRLF-Injection

CVE-2026-XXXXX: Mastodon Streaming Server — HTTP 响应头注入（CRLF 注入） 漏洞概览 项目| 详情 ---|--- CVE 编号| CVE-2026-XXXXX 影响产品| Mastodon（流媒体服务器） 影响版本| ≤ 4.5.9 漏洞文件| streaming/index.js 第 188–206 行 漏洞类型| HTTP 响应头注入 / CRLF 注入 CWE| CWE-74：输出特殊元素不当中和 CVSS 3.1| 6.5（中危） 攻击方式| 网络远程，无需认证 漏洞描述 当 WebSocket...

cve-2026-47777

CVE-2026-47777 — Mastodon Featured Collections 授权绕过 概述 我负责任地披露了一个影响 Mastodon 实验性 Featured Collections 联邦管道的高危授权绕过 漏洞。 CVE ID： CVE-2026-47777 受影响组件 ActivityPub::VerifyFeaturedItemService 弱点 CWE-345 — 数据真实性验证不足 CWE-863 — 授权不正确 CVSS v3.1 分数| 向量 ---|--- 7.5（高危）|...

CVE-2026-19499

creationtimestamp| type| source ---|---|--- 2026-09-22 03:30:19+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mw3by7e4sb2v 2026-09-22 03:30:34+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117312574673426259...

CVE-2026-62279

creationtimestamp| type| source ---|---|--- 2026-09-22 03:20:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mw3bfuhp5g2v 2026-09-22 03:20:07+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117312533494084443...

CVE-2026-93749

creationtimestamp| type| source ---|---|--- 2026-09-21 18:40:20+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117310489382248119...

CVE-2026-25687

creationtimestamp| type| source ---|---|--- 2026-09-21 13:50:22+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvzu5zfxwm2m 2026-09-21 14:10:10+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117309426986253732...

CVE-2026-94015

creationtimestamp| type| source ---|---|--- 2026-09-21 11:03:07+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117308691969531824...

CVE-2026-80984

creationtimestamp| type| source ---|---|--- 2026-09-20 18:10:05+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117304708418428139 2026-09-20 18:30:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvxtd7png22g 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-80987

creationtimestamp| type| source ---|---|--- 2026-09-20 16:40:17+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117304355465594909 2026-09-20 16:50:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvxnqfhj7n27 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-80968

creationtimestamp| type| source ---|---|--- 2026-09-20 15:00:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvxhlowjpc2o 2026-09-20 15:00:08+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117303961377350404 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-80994

creationtimestamp| type| source ---|---|--- 2026-09-20 13:30:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvxckrps3w2l 2026-09-20 13:30:07+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117303607472673974 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-81916

creationtimestamp| type| source ---|---|--- 2026-09-20 11:50:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvx4xxx7vv2g 2026-09-20 11:50:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117303214274287511...

CVE-2026-81913

creationtimestamp| type| source ---|---|--- 2026-09-20 10:20:20+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvwxxjyfyw2v 2026-09-20 10:20:22+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117302861469151909...

CVE-2026-80950

creationtimestamp| type| source ---|---|--- 2026-09-20 08:50:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvwsw3ev4w2l 2026-09-20 08:50:03+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117302506458096908...

CVE-2026-87068

creationtimestamp| type| source ---|---|--- 2026-09-20 07:30:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117302193298773242 2026-09-20 07:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvwohqfp5524...

CVE-2026-80930

creationtimestamp| type| source ---|---|--- 2026-09-20 07:10:08+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117302113202629917 2026-09-20 07:20:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvwnv5zebg2v 2026-10-01 18:00:00+00:00| seen|...

CVE-2026-80942

creationtimestamp| type| source ---|---|--- 2026-09-20 04:31:01+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117301487908064963 2026-09-20 04:31:01+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvwegvwxho2c 2026-10-01 18:00:00+00:00| seen|...