1558 matches found
CVE-2025-61727
An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN .example.com...
CVE-2025-61727 Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509
An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN .example.com...
CVE-2025-61727 Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509
An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN .example.com...
CVE-2025-61727 Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509
An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN .example.com...
Google Go å®å Øę¼ę“
Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google USA. A security vulnerability exists in Google Go that stems from a subdomain constraint excluded from the crypto/x509 certificate chain that does not restrict the use of the...
GO-2025-4175 Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509
An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN .example.com...
Improper Certificate Validation
Overview std/crypto/x509 is a Go standard library package std/crypto/x509 Affected versions of this package are vulnerable to Improper Certificate Validation. Go Vulnerability Report: An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf...
Improving the Identification of Real-World Malware's DNS Covert Channels Using Locality Sensitive Hashing
Nowadays, malware increasingly uses DNS-based covert channels in order to evade detection and maintain stealthy communication with its command-and-control servers. While prior work has focused on detecting such activity, identifying specific malware families and their behaviors from captured...
Malicious code in @ensdomains/subdomain-registrar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401414959edb6c3fa49058cca521272f84ed2c1e5aef8d7cacadb50696789ba5 The package @ensdomains/subdomain-registrar was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190812 Malicious code in @ensdomains/subdomain-registrar (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 401414959edb6c3fa49058cca521272f84ed2c1e5aef8d7cacadb50696789ba5 The package @ensdomains/subdomain-registrar was found to contain malicious code. Source: ghsa-malware...
EUVD-2025-198865
Malicious code in @ensdomains/subdomain-registrar npm...
ctf-toolkit
Bug Bounty Recon Tool š The Ultimate Bug Bounty Recon Tool...
Siemens SCALANCE and RUGGEDCOM Devices Incorrect Comparison (CVE-2024-9681)
When curl is asked to use HSTS, the expiry time for a subdomain might overwrite a parent domain's cache entry, making it end sooner or later than otherwise intended. This affects curl using applications that enable HSTS and use URLs with the insecure HTTP:// scheme and perform transfers with host...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
The-Challenge-Soulmate- The "Soulmate" machine from HackTheBox...
Linux Distros Unpatched Vulnerability : CVE-2025-11720
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Firefox and Firefox Focus UI for the Android custom tab feature only showed the site that was loaded, not the full hostname. User supplied content hosted on...
SUSE CVE-2025-11720
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This...
EUVD-2025-34194
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This...
CVE-2025-11720
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This...
CVE-2025-11720
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This...
CVE-2025-11720
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a different subdomain of that site. This...