Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped

Summary Nodemailer's address parser has three published, patched fixes for RFC 5322 comment ... handling inside an addr-spec: GHSA-cc9r-2j5m-2m83 comment glued two domain atoms into one, GHSA-g57g-f23g-4646 the same glue for a quoted local part, and the related ReDoS fixes GHSA-prgh-xp8r-p3m5 /...

GHSA-G73G-HQQH-JR95 Nodemailer: RFC 5322 comment inside an angle-bracket address is never stripped

Summary Nodemailer's address parser has three published, patched fixes for RFC 5322 comment ... handling inside an addr-spec: GHSA-cc9r-2j5m-2m83 comment glued two domain atoms into one, GHSA-g57g-f23g-4646 the same glue for a quoted local part, and the related ReDoS fixes GHSA-prgh-xp8r-p3m5 /...

GHSA-4G23-2XM8-66GC Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service

Summary The SMTP client response parser reassembles multiline server replies by appending each continuation line onto a single response-queue entry and re-testing whether that entry is still a partial continuation reply on every line. The partial-response test runs str.slicestr.lastIndexOf'\n' + ...

Nodemailer: Quadratic (O(n^2)) SMTP client reply parsing lets a malicious server or MITM cause a pre-auth remote denial of service

Summary The SMTP client response parser reassembles multiline server replies by appending each continuation line onto a single response-queue entry and re-testing whether that entry is still a partial continuation reply on every line. The partial-response test runs str.slicestr.lastIndexOf'\n' + ...

EDRSandblast-GodFault

EDRSandblast-GodFault By Gabriel Landau at Elastic Security. Modification of EDRSandblast - see original README below. Integrates GodFault into EDR Sandblast, achieving the same result without the use of any vulnerable drivers. Example Output C:\Users\user\Desktop\OffsetsEDRSandblast.exe...

CVE-2026-117507 a2aproject a2a-java TaskManager.saveTaskEvent race condition

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to race condition. The attack may be initiated remotely. Upgrading to version 1.3.0.Final will fix this issue. The identifier of the pat...

CVE-2026-117507 a2aproject a2a-java TaskManager.saveTaskEvent race condition

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to race condition. The attack may be initiated remotely. Upgrading to version 1.3.0.Final will fix this issue. The identifier of the pat...

CVE-2026-117507

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to race condition. The attack may be initiated remotely. Upgrading to version 1.3.0.Final will fix this issue. The identifier of the pat...

CVE-2026-117507

A security vulnerability exists in a2aproject a2a-java up to version 1.2.0.Final . The issue is located within the TaskManager.saveTaskEvent function, where improper synchronization leads to a race condition (CWE-362). This vulnerability can be triggered remotely. To remediate this issue, users s...

EUVD-2026-111072

A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final. This impacts the function TaskManager.saveTaskEvent. The manipulation leads to race condition. The attack may be initiated remotely. Upgrading to version 1.3.0.Final will fix this issue. The identifier of the pat...

CVE-2026-117506

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

EUVD-2026-110929

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

CVE-2026-117506

A weakness in the Push Notification Config Store component of a2aproject a2a-java (versions up to 1.2.0.Final ) allows for remote resource consumption. The vulnerability exists within the InMemoryPushNotificationConfigStore.setInfo function of the JpaDatabasePushNotificationConfigStore.java file....

CVE-2026-117506 a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

CVE-2026-117506 a2aproject a2a-java Push Notification Config Store JpaDatabasePushNotificationConfigStore.java InMemoryPushNotificationConfigStore.setInfo resource consumption

A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final. This affects the function InMemoryPushNotificationConfigStore.setInfo of the file...

WindowsRegistryRootkit

Kernel rootkit, that lives inside the Windows registry value data. By Oleksiuk Dmytro aka Cr4sh http://twitter.com/dolex http://blog.cr4.sh [email protected] Rootkit uses the zero day vulnerability in win32k.sys buffer overflow in function win32k!bInitializeEUDC to get the execution at the O...

CVE-2026-117505

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be initiated remotely. Upgrading to version 1.3.0.Final is sufficie...

EUVD-2026-110927

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be initiated remotely. Upgrading to version 1.3.0.Final is sufficie...

CVE-2026-117505

A security flaw exists in a2aproject a2a-java up to version 1.2.0.Final . The vulnerability is located in the ChildQueue component, specifically within the queue.offer function. A remote attacker can perform a manipulation that leads to resource consumption , as categorized by CWE-400 (Uncontroll...

CVE-2026-117505 a2aproject a2a-java ChildQueue queue.offer resource consumption

A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be initiated remotely. Upgrading to version 1.3.0.Final is sufficie...