cve-2022-27255

CVE-2022-27255 - Realtek eCos SDK SIP ALG बफर ओवरफ्लो इस रिपॉजिटरी में "OEM IoT उपकरणों की छिपी हुई आक्रमण सतह की खोज: eCos OS के लिए Realtek के SDK में एक भेद्यता के माध्यम से हजारों राउटरों को हैक करना।" शीर्षक वार्ता की सामग्री शामिल है, जिसे DEFCON30 में प्रस्तुत किया गया था। इस रिपॉजिटरी की...

CyberMeowfia

الموقع: nebusec.ai · تويتر @nebusecurity · قائمة الثغرات 885+ متابعة IonStack، تابع https://github.com/NebuSec/CyberMeowfia/issues/44 أحدث الأبحاث IonStack الجزء الثاني : GhostLock، ثغرة stack-UAF موجودة في جميع توزيعات لينكس منذ 15 عامًا Linux Kernel 📖 الكتابة · 🐦 تويتر Longinus : حدّان في ثغرة...

nebula

Nebula AI संचालित पेंटेस्टिंग जीरो लेयर वर्कबेंच आभार सबसे पहले, मैं सर्वशक्तिमान ईश्वर का धन्यवाद करना चाहता हूँ, जो सभी ज्ञान का स्रोत हैं। उनके बिना, यह संभव नहीं होता। Nebula एक सुरक्षा अभियान के काम करने वाले भागों को एक डेस्कटॉप सतह पर लाता है: टर्मिनल, कोड, ब्राउज़र, सहायक, फ़ाइलें, नोट्स,...

Nebula

नेबुला नेबुला एक क्लाउड और उम्मीद है DevOps पेनिट्रेशन टेस्टिंग फ्रेमवर्क है। यह प्रत्येक प्रदाता और प्रत्येक कार्यक्षमता के लिए मॉड्यूल के साथ बनाया गया है। अप्रैल 2021 तक, यह केवल AWS को कवर करता है, लेकिन वर्तमान में यह एक चालू प्रोजेक्ट है और उम्मीद है कि यह GCP, Azure, Kubernetes, Docker, या...

CVE-2026-63464

CVE-2026-63464 affects nebula-mesh , a self-hosted control plane for Slack Nebula mesh VPN, in versions 0.6.0 through before 0.7.2 . The vulnerability is an SSRF that arises because non-admin operators (role user) can set allow_private: true on their own webhook subscription via POST/PATCH /api/v...

CVE-2026-61699

nebula-mesh (forgekeep) is a self-hosted control plane for the Slack Nebula mesh VPN. Prior to v0.7.1 , the agent-side poller decodes the per-CA revocation blocklist from the server but discards it — it never writes pki.blocklist into the local config.yml, and the config generator has no field to...

CVE-2026-55513

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. In versions 0.3.0 through before 0.5.0 , the POST /ui/hosts Web UI endpoint hardcodes a 24-hour enrollment token expiry instead of using the configured enrollment_token_ttl (server-wide or per-network) resolver that the API pat...

CVE-2026-55512

nebula-mesh (self-hosted control plane for Slack Nebula mesh VPN) versions 0.2.0 through before 0.5.0 are vulnerable to uncontrolled resource consumption via the GET /ui/oidc/login endpoint. When OIDC is enabled, this route is registered outside the Web UI rate-limited auth group, so every unauth...

CVE-2026-53604

nebula-mesh (a self-hosted control plane for Slack Nebula mesh VPN by forgekeep ) is affected by a key-zeroization flaw in its web UI mobile-bundle path. The renderMobileBundle handler passes a decrypted *pki.CAManager containing the CA's ed25519 private key into mobilebundle.Build, which never c...

CVE-2026-53603

nebula-mesh , a self-hosted control plane for Slack Nebula mesh VPN, stored operator session tokens in plaintext in the operator_sessions table (the token column served as the PRIMARY KEY). Each token is a 32-byte random hex value delivered via cookie with a 24-hour validity. Unlike API keys and ...

CVE-2026-53602 nebula-mesh - Host revocation is not durable: blocked/offboarded hosts can regain a valid certificate

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.3.7, two related authorization gaps let a host that should no longer be trusted obtain a fresh, valid Nebula certificate, because nebula-mgmt does not re-evaluate revocation/authorization state at certificate...

CVE-2026-53602

CVE-2026-53602 affects nebula-mesh , a self-hosted control plane for Slack Nebula mesh VPN (github.com/forgekeep/nebula-mesh), prior to version 0.3.7 . The core issue is that host revocation is not durable : blocked or offboarded hosts can regain a fresh, valid Nebula certificate because nebula-m...

PT-2026-86242

nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. From version 0.6.0 to before version 0.7.2, non-admin operators role user can set allow private: true on their own managed webhook subscription POST/PATCH /api/v1/webhook-subscriptions. No admin check exists on this field. At...

CVE-2026-43499-pja110

वेबसाइट: nebusec.ai · Twitter @nebusecurity · बग सूची 885+ नवीनतम शोध IonStack part II : GhostLock, एक stack-UAF जो 15 वर्षों से सभी Linux वितरणों में मौजूद है Linux Kernel 📖 विवरण · 🐦 Twitter Longinus : एक बग में 2 सीमाएँ, एक ही भेद्यता से Chrome के Renderer और V8 Sandbox को भेदना, CVE-2026-6307...

[SECURITY] Fedora 44 Update: nebula-1.11.1-1.fc44

A scalable overlay networking tool with a focus on performance, simplicity and security...

Fedora 44 : nebula (2026-08fe186b29)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-08fe186b29 advisory. Update to 1.11.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

CVE-2026-74238

TIER IV Nebula through 1.2.0 contains an out-of-bounds read vulnerability in the Vlp32Decoder::unpack function that allows unauthenticated remote attackers to cause the decoder to read past the end of a received UDP buffer into adjacent heap memory by sending a short UDP datagram. Attackers can...

EUVD-2026-60323

TIER IV Nebula through 1.2.0 contains an out-of-bounds read vulnerability in the Vlp32Decoder::unpack function that allows unauthenticated remote attackers to cause the decoder to read past the end of a received UDP buffer into adjacent heap memory by sending a short UDP datagram. Attackers can...

CVE-2026-74238 TIER IV Nebula 1.2.0 Heap Out-of-Bounds Read via VLP32 UDP Decoder

TIER IV Nebula through 1.2.0 contains an out-of-bounds read vulnerability in the Vlp32Decoder::unpack function that allows unauthenticated remote attackers to cause the decoder to read past the end of a received UDP buffer into adjacent heap memory by sending a short UDP datagram. Attackers can...

CVE-2026-74238 TIER IV Nebula 1.2.0 Heap Out-of-Bounds Read via VLP32 UDP Decoder

TIER IV Nebula through 1.2.0 contains an out-of-bounds read vulnerability in the Vlp32Decoder::unpack function that allows unauthenticated remote attackers to cause the decoder to read past the end of a received UDP buffer into adjacent heap memory by sending a short UDP datagram. Attackers can...