992316 matches found
SMTP Open Relay
Tests whether an SMTP server accepts third-party relay MAIL FROM / RCPT TO to external domains without completing DATA NSE smtp-open-relay. !/usr/bin/env python3 -- coding: utf-8 -- """SMTP open relay check NSE smtp-open-relay.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient...
DNS Recursion Available
Checks whether a DNS server answers recursive queries for third-party names open resolver risk — NSE dns-recursion. !/usr/bin/env python3 -- coding: utf-8 -- """DNS recursion check NSE dns-recursion.""" from kittysploit import from lib.protocols.ics.icsscannerclient import Icsscannerclient from...
SOCKS Open Proxy
Tests whether a SOCKS4/5 service allows unauthenticated CONNECT to an external host NSE socks-open-proxy. !/usr/bin/env python3 -- coding: utf-8 -- """Open SOCKS4/5 proxy check NSE socks-open-proxy.""" from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient from...
JLSEC-2026-1086 libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow...
libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2ciphercrypt function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit...
abrt: ChownProblemDir succeeds during active post-create event processing due to inadequate locking
A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method. ChownProblemDir opens the dump directory with DDOPENREADONLY and calls ddchown to change ownership of all files to the caller's uid, succeeding even while post-create event handlers hold a write lock. This allows ...
GHSA-GHRQ-5WPP-HXX5 Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service
Summary A maliciously crafted packet received & parsed during the SFTP connection handshake will cause a Go panic. Impact All wings users with an open SFTP port. Workarounds Close SFTP port...
Wings: Maliciously crafted packet during SFTP connection handshake causes denial of service
Summary A maliciously crafted packet received & parsed during the SFTP connection handshake will cause a Go panic. Impact All wings users with an open SFTP port. Workarounds Close SFTP port...
akto vdata-ingestion-1.5.0
Akto.io API Security Contributors What is Akto? How it works • Getting-Started • API Inventory • API testing • Add Test • Join Discord community • Akto is an instant, open source API security platform that takes only 60 secs to get started. Akto is used by security teams to maintain a continuous...
[SECURITY] [DLA 4708-1] python-authlib security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4708-1 [email protected] https://www.debian.org/lts/security/ Andrej Shadura July 31, 2026 https://wiki.debian.org/LTS -...
Exploit for CVE-2026-64531
OVSwrap CVE-2026-64531 Mitigation Tool A simple script that...
CVE-2026-67350
Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...
CVE-2026-67350
Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.15.67 bug fix and security update
Red Hat OpenShift Container Platform release 4.15.67 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.15. Red Hat Product Security has rated this update as having a...
CVE-2026-67350 Serendipity < 2.6.1 Open Redirect via exit.php
Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...
CVE-2026-67350
Serendipity
CVE-2026-67350
Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...
CVE-2026-67350
Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...
CVE-2026-67350 Serendipity < 2.6.1 Open Redirect via exit.php
Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...
CVE-2026-67350 Serendipity < 2.6.1 Open Redirect via exit.php
Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...
EUVD-2026-51552
Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...