992148 matches found
CVE-2026-118659
The @happy-dom/server-renderer package (prior to version 21.0.2 ) is vulnerable to a Server-Side Request Forgery (SSRF) and can be used as an Open Proxy . The root cause is located in the #onIncomingRequest function within packages/@happy-dom/server-renderer/src/ServerRendererServer.ts, where the...
CVE-2026-118659 @happy-dom/server-renderer: ServerRendererServer Target-Origin Bypass SSRF / Open Proxy
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 21.0.2, the Happy DOM server-renderer package's ServerRendererServer accepts unauthenticated HTTP/2 requests and resolves attacker-controlled :path values against server.targetOrigin in...
CVE-2026-118659 @happy-dom/server-renderer: ServerRendererServer Target-Origin Bypass SSRF / Open Proxy
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 21.0.2, the Happy DOM server-renderer package's ServerRendererServer accepts unauthenticated HTTP/2 requests and resolves attacker-controlled :path values against server.targetOrigin in...
CVE-2026-118659 @happy-dom/server-renderer: ServerRendererServer Target-Origin Bypass SSRF / Open Proxy
Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Prior to 21.0.2, the Happy DOM server-renderer package's ServerRendererServer accepts unauthenticated HTTP/2 requests and resolves attacker-controlled :path values against server.targetOrigin in...
CVE-2026-118656
The Echo Go web framework is vulnerable to an Open Redirect (CWE-601) in versions prior to 4.16.0 and 5.4.0 . The vulnerability exists because the sanitizeURI function only checks the first two bytes of a redirect target to determine if it starts with an absolute-path separator. Attackers can use...
CVE-2026-118656 Echo: Open Redirect via Control-Character Prefix Defeating sanitizeURI
Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target before deciding whether it begins with an absolute-path separator pair. When AddTrailingSlash or RemoveTrailingSlash is configured with a redirect status, a slash, TAB, separato...
CVE-2026-118656 Echo: Open Redirect via Control-Character Prefix Defeating sanitizeURI
Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target before deciding whether it begins with an absolute-path separator pair. When AddTrailingSlash or RemoveTrailingSlash is configured with a redirect status, a slash, TAB, separato...
CVE-2026-109411 Samba: access control bypass via vfs_ceph_rgw case-insensitive open
An access control bypass flaw was identified in Samba's vfscephrgw module in it's openat function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfscephrgw module. When a client requests an existing file using...
CVE-2026-109411 Samba: access control bypass via vfs_ceph_rgw case-insensitive open
An access control bypass flaw was identified in Samba's vfscephrgw module in it's openat function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfscephrgw module. When a client requests an existing file using...
CVE-2026-109411 Samba: access control bypass via vfs_ceph_rgw case-insensitive open
An access control bypass flaw was identified in Samba's vfscephrgw module in it's openat function. An authenticated user can bypass access controls to read or overwrite restricted files on shares configured with the experimental vfscephrgw module. When a client requests an existing file using...
salt-scanner
salt-scanner A linux vulnerability scanner based on Vulners Audit API and Salt Open, with Slack notifications and JIRA integration. Features Slack notification and report upload JIRA integration OpsGenie integration Requirements Salt Open 2016.11.x salt-master, salt-minion¹ Python 2.7 salt you ma...
CVE-2026-116774
russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 until 0.65.0, channel-open parsing accepts a peer-declared maximumpacketsize of zero and passes it into ChannelTx::pollwritable in russh/src/channels/io/tx.rs. The Channel::data,...
GOSINT
GOSINT - Open Source Threat Intelligence Gathering and Processing Framework The GOSINT framework is a project used for collecting, processing, and exporting high quality indicators of compromise IOCs. GOSINT allows a security analyst to collect and standardize structured and unstructured threat...
DAMM
DAMM An open source memory analysis tool built on top of Volatility. It is meant as a proving ground for interesting new techniques to be made available to the community. These techniques are an attempt to speed up the investigation process through data reduction and codifying some expert...
CVE-2026-118435
Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation...
CVE-2026-118435
The Samsung Open Source escargot project contains an out-of-bounds write vulnerability (CWE-787) that enables Buffer Manipulation . This vulnerability has a CVSS 3.1 base score of 5.4 (MEDIUM) , with a network attack vector and low attack complexity requiring user interaction. No specific exploit...
CVE-2026-118435
Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation...
CVE-2026-118435
Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation...
EUVD-2026-111820
Out-of-bounds write vulnerability in Samsung Open Source escargot allows Buffer Manipulation...
kernel: selinux: check connect-related permissions on TCP Fast Open
A flaw was found in the Linux kernel's Security-Enhanced Linux SELinux module. When using TCP Fast Open, SELinux failed to properly check connect-related permissions. This oversight could allow a local attacker to bypass SELinux network access controls, potentially enabling unauthorized network...