801 matches found
CVE-2026-25793 Nebula Has Possible Blocklist Bypass via ECDSA Signature Malleability
Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates which is not the default configuration, it is possible to evade a blocklist entry created against the fingerprint of a certificate by using ECDSA Signature Malleability to use a copy of th...
Nebula 数据伪造问题漏洞
Nebula is an open-source WordPress theme framework focused on enhancing development capabilities. Versions of Nebula from 1.7.0 to 1.10.2 have a data manipulation vulnerability. This vulnerability arises from the possibility of circumventing the certificate fingerprint block list by using P256...
CVE-2026-25793: Improper Verification of Cryptographic Signature
Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates which is not the default configuration, it is possible to evade a blocklist entry created against the fingerprint of a certificate by using ECDSA Signature Malleability to use a copy of th...
PT-2026-6835
Name of the Vulnerable Software and Affected Versions Nebula versions 1.7.0 through 1.10.2 Description Nebula is a scalable overlay networking tool. When using P256 certificates which is not the default configuration, it is possible to evade a blocklist entry created against the fingerprint of a...
Improper Access Control
github.com/slackhq/nebula is vulnerable to Improper Access Control. The vulnerability is due to incorrect handling of CIDR ranges in certain configurations, which allows an attacker to spoof or use arbitrary source IP addresses within the Nebula network...
CVE-2023-43687
An issue was discovered in Malwarebytes before 4.6.14.326 and before 5.1.5.116 and Nebula 2020-10-21 and later. There is a Race condition that leads to code execution because of a lack of locks between file verification and execution...
CVE-2023-43694
An issue was discovered in Malwarebytes 4.6.14.326 and before and 5.1.5.116 and before and Nebula 2020-10-21 and later. An Out of bounds read in several disassembling utilities causes stability issues and denial of service...
[SECURITY] Fedora 43 Update: nebula-1.10.0-2.fc43
A scalable overlay networking tool with a focus on performance, simplicity and security...
Fedora 43 : nebula (2025-bf07d21f3e)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-bf07d21f3e advisory. Upstream update Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested fo...
Fedora: Security Advisory (FEDORA-2025-bf07d21f3e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...
Malicious code in orbit-nebula-editor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39053d1e21106bb38ff0f67ad92e018d3e94dd368d8a9df7df45391acd94b852 The package orbit-nebula-editor was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198764
Malicious code in orbit-nebula-editor npm...
MAL-2025-190777 Malicious code in orbit-nebula-editor (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39053d1e21106bb38ff0f67ad92e018d3e94dd368d8a9df7df45391acd94b852 The package orbit-nebula-editor was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198657
Malicious code in orbit-nebula-draw-tools npm...
MAL-2025-190698 Malicious code in orbit-nebula-draw-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4d521db6f84340dc75631ec8c317db0054fa0b23e218d304ea901c1f239909 The package orbit-nebula-draw-tools was found to contain malicious code. Source: ghsa-malware...
Malicious code in orbit-nebula-draw-tools (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4d521db6f84340dc75631ec8c317db0054fa0b23e218d304ea901c1f239909 The package orbit-nebula-draw-tools was found to contain malicious code. Source: ghsa-malware...
Malicious code in remark-loglevel-process-nebula (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53b2cdb762f4052d4146c3d2d35d10fe3fe6516343cf764c76cc9a051dfc4474 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...